How EDR Works

advanced Hands-on lab 45 min 3 tasksSubscription

The telemetry sources and hooks a modern endpoint detection product uses to see what runs on a host.

This lab is available with a Purple Edge subscription. Sign in to view the full overview and start the lab.

Part of these paths

Unlock this lab

Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.

Updated 2026-09-01