What does the EDR module monitor and where can I see its logs?

[mrwebfeeder]

Hi!

The EDR (Endpoint Detection & Response) module goes beyond traditional scanning. Its purpose is to continuously monitor the endpoint and provide visibility into what’s happening over time.
It focuses on:

• Continuous monitoring: EDR runs in the background, looking for suspicious activity and potential threats across the endpoint.
  
• Behavioral analytics: Instead of looking only at files, it tracks processes, behaviors, and patterns to detect anomalies early.
  
• Logs and status:
  • The EDR panel shows the current protection status.
    
  • It gives you access to logs, where you can review events and detections related to endpoint behavior. 
    
    

So yes, it gives you more detailed telemetry about your system and helps you understand “who did what and when”, which is very useful for incident investigation and response.