Telemetry

Also written: EDR telemetry

The activity records an EDR agent collects: programs started, their parents, command lines, files and network connections.

Where the book teaches it