The “R” in EDR is Response action: alerts, containment, and/or remediation of an attack as fast as possible. Reporting helps harden against future attacks.