An endpoint protection platform is primarily focused on preventing compromise on the endpoint (commonly including antimalware and preventative controls such as behavior blocking and, in many solutions, sandboxing). Endpoint detection and response is focused on continuous endpoint visibility, analytics, and response workflows, often leveraging threat intelligence to help identify, investigate, and contain suspicious behavior.