EDR security tools help to keep attackers that get past anti-virus systems or exploits that may be launched by an unaware endpoint user from gaining the ability to move across the network undetected. EDR tools also provide the key information about endpoint usage that can be crucial in discovering the root cause of an incident, as well as determining if and how an exploit may have been leveraged to gain further access across the network.