<p>What are the core benefits of Kaspersky Endpoint Detection and Response Expert Base?<br /> <strong>Cloud console</strong> – Centrally managed from Kaspersky Security Center Cloud Console.<br /> <strong>Threat hunting</strong> – Query builder searches stored endpoint telemetry for suspicious behaviour.<br /> <strong>Network isolation</strong> – Cuts a compromised device off the network.<br /> <strong>Custom rules</strong> – YARA and IoA detections mapped to MITRE ATT&amp;CK.<br /> <strong>Telemetry retention</strong> – Thirty days of stored events by default.<br /> <strong>Important note</strong> – Requires Kaspersky Endpoint Security on every protected device.</p>