Network-Layer Detection in an EDR World

EDR tells you what happens on your endpoints — the network tells you what happens between them, and attackers live in that gap.