EDR Telemetry Scores

Scoring Logic

The scores are calculated based on two factors:

1. Status Values: Each possible status a feature can have is assigned a specific value:
   • Yes: 1
   • No: 0
   • Via EnablingTelemetry: 1
   • Partially: 0.5
   • Via EventLogs: 0.75
   • Pending Response: 0
2. Feature Weights: Each telemetry feature (Sub-Category) has a weight representing its importance.

   For the full list of feature weights, please refer to the project's Code Scoring Logic.

The total score for each EDR is calculated by summing the products of the status values and the feature weights for all telemetry features:

Total Score = Σ (Status Value × Feature Weight)

This scoring method provides a nuanced comparison, taking into account both the availability of features and their relative importance.