Expel is strengthening AWS cloud-native detections via Security Hub
Endpoint detection and response (EDR) collects endpoint data to establish normal patterns, helping monitor for compromises and providing intelligence for containment and remediation.