Windows EDR Telemetry

Explore detailed telemetry capabilities and comparisons for Windows-based EDR solutions.

Legend
✅
YesImplemented
❌
NoNot Implemented
⚠️
PartiallyPartially Implemented (hover-over for explanation)
❓
PendingPending Response
🪵
Via EventLogsIndicates telemetry that is available Via EventLogs
🎚️
Via EnablingTelemetryAdditional telemetry collection capability that can be enabled as part of the EDR product but is not ON by default.
Enable Hover Highlight
Show ScoresMitre ATT&CK Mappings