Can I use AIR with EDR/XDR Products?

Using AIR with EDR/XDR Products

The level of forensic information AIR provides is the biggest differentiator that separates it from the rest of the crowd. This fact makes AIR a perfect candidate for using it side-by-side with an EDR/XDR product.

Here are some EDR/XDR use-case examples:

  • Eliminating false positives by providing analysts with AIR reports,

  • Investigating pre-cursors,

  • Enriching an alert,

  • Responding to EDR/XDR alerts automatically.

If you use an EDR/XDR or EPP software along with Binalyze, check our exclusion/exception rules page.

Last updated