Can I use AIR with EDR/XDR Products?
Using AIR with EDR/XDR Products
The level of forensic information AIR provides is the biggest differentiator that separates it from the rest of the crowd. This fact makes AIR a perfect candidate for using it side-by-side with an EDR/XDR product.
Here are some EDR/XDR use-case examples:
- Eliminating false positives by providing analysts with AIR reports,
- Investigating pre-cursors,
- Enriching an alert,
- Responding to EDR/XDR alerts automatically.