Endpoint detection and response (EDR) comprises three key components that enable it to offer visibility into endpoints. Which of the following options is NOT one of those three parts?

EDR is primarily concerned with recognizing abnormalities and problems, but it is not intended to function as a malware analysis tool. Rather, the capacity to search and investigate data, pinpoint suspicious activities, and coordinate responses is what constitutes an EDR tool.