| Installer | ✔️ | ✔️ | ✔️ |
| Event Collection | ✔️ | ✔️ | ✔️ |
| Syscall Collection | ✔️ | | |
| Resource Monitoring | ✔️ | ✔️ | ✔️ |
| End-to-End Encryption | ✔️ | ✔️ | ✔️ |
| Secure Device Authentication | ✔️ | ✔️ | ✔️ |
| Offline Protection Features | ✔️ | ✔️ | |
| Automatic Event Enrichment | ✔️ | ✔️ | |
| Automatic Log Parsing | ✔️ | ✔️ | |
| Installed Program Inventory | ✔️ | ✔️ | |
| Data Collection via Integrations Support | | ✔️ | |
| USB Protection | ✔️ | ✔️ | ✔️ |
| LLDP Support¹ | | ✔️ | |
| SNMP Support¹ | | ✔️ | |
| HTTP REST Support¹ | | ✔️ | |
| DNS Monitoring | ✔️ | | |
| ML Anomaly Analysis | ✔️ | ✔️ | ✔️ |
| Static Malware Analysis | ✔️ | ✔️ | ✔️ |
| Ransomware Protection | ✔️ | ✔️ | ✔️ |
| Malicious File Disk Scanner | ✔️ | ✔️ | ✔️ |
| Local Incident Response Actions Support | ✔️ | ✔️ | |
| Integration Incident Response Actions Support | | ✔️ | |
| Behavioral Process Analysis | ✔️ | ✔️ | |
| In-Memory Data Analysis | ✔️ | ✔️ | |
| Exploit Protection | ✔️ | ✔️ | |
| Command & Control (C&C) Communication ID | ✔️ | ✔️ | |
| Cryptocurrency Miner Blocking | ✔️ | ✔️ | |
