It usually depends on each customer’s risk profile and tolerance as well as regulatory environments and budgets. As attacks have evolved significantly in the last years, we recommend Advanced Threat Security and Endpoint Detection and Response become the standard or default offering. Also, adding Extended Detection and Response on top of ATS and EDR can improve cyber-security for your customers and allows them to couple expertise with reduced alert overload and analyst fatigue by automatically analyzing and correlating activities across different telemetry sources. Alerts can be resolved more effectively with integrated views of evidence for the investigation, while automation can increase operational efficiency by reducing repetitive tasks.