Which Cortex XDR license is required for endpoint detection and response (EDR) data collection capabilities?

The required license for endpoint detection and response (EDR) data collection capabilities is the Cortex Pro Per Endpoint license. This license is designed specifically to enable the comprehensive collection of EDR data from endpoints, which supports advanced threat detection and management tools.

Cortex Pro Per Endpoint provides the necessary features for real-time monitoring and analysis of endpoint activities and for responding to potential threats effectively. This is essential for organizations looking to enhance their security posture through proactive endpoint protection and incident response.

While other licenses, such as Cortex XDR Prevent and Cortex XDR Endpoint, may provide various capabilities in the realm of endpoint security and response, they do not encompass the full scope of EDR data collection required for robust endpoint detection. Cortex XDR Pro per TB also focuses on data ingestion limits rather than specifically addressing EDR features for individual endpoints. As a result, the Cortex Pro Per Endpoint license is distinct in offering the solutions needed for effective EDR data collection.