While Endpoint Detection and Response (EDR) tools have been a mainstay of workload protection, detection, and incident response within traditional network environments, there are differences on the cloud, including detection, automation capabilities, and scalability requirements.

In this whitepaper, "How to protect cloud workloads with modern Endpoint Detection and Response", SANS Senior Instructor, Dave Shackleford, and Amazon Web Services (AWS) Sr. Security Solution Architect, Threat Detection and Incident Response, Kyle Dickinson, explain the evolution of modern EDR and key features to look for in EDR products, including those available in AWS Marketplace.