Proactive threat hunting with custom detection rules on endpoint telemetry

Security analysts use the system’s history of device activity to search for hidden attackers and can set custom rules to watch for suspicious files, settings, or behaviors before damage grows.