With ESET Inspect, we have a tool for responding to incidents and managing events on endpoint computers and servers, investigating events and potential indicators of compromise.

It gave us an insight into the regular, day-to-day operations on endpoints and servers and a pretty remarkable and continuous penetration tool for ongoing testing of our environment. 

One of our previous clients was utilizing a different EDR solution and was unable to fully comprehend the incident's flowchart. They were uncertain about the origin and the affected areas of the incident, and they could not determine which executable was capable of fixing the damage. As a result, we conducted a proof of concept test to demonstrate the effectiveness of ESET Enterprise Inspector. This test was invaluable in showcasing the flowchart of the incident and the specific executable required to resolve the issue. Subsequently, when the malware propagated to new devices, we were able to capture and document all the incidents in one centralized location.

I find that the Data Collection feature has improved my organization. We can view comprehensive data about newly executed modules. This includes: time of execution, user dwell time and attacked devices. All data is also locally stored to prevent sensitive data leakage.