InEndpoint Detection and Response (EDR), theEndpoint searchfeature is used to search forreal-time indicators of compromise (IoCs)across managed devices. This feature allows security teams to investigate suspicious activities by querying endpoints directly for evidence of threats, helping to detect and respond to potential compromises swiftly.
SES Complete Documentationdescribes Endpoint search as a crucial tool for threat hunting within EDR, enabling real-time investigation and response to security incidents.