[hunter-gatherer]

So many of the comments here seem to be completely unaware of what an EDR does. Do none of you all work for companies with managed devices? There isn't anything abnormal here...

I work on a REM team in a SOC for a big finance company all you US people know. An employee can't hardly fart in front of their corporate machine without us knowing about it. How do you all think managed cyber security works?

[jamesnorden]

The point you seem to be (intentionally?) missing is that this wasn't installed by the IT staff in an org to an employee's computer, an user downloaded their software to trial it an they just happened to take a peek on all of his activity based on tenuous evidence at best.

[mc32]

They might be under the impression that all this activity is looked at by someone for curiosity’s sake -snooping. It isn’t. People only look and discover if there is reason (a critical alert or some legal action). No one goes snooping to see what sites Joe visited this morning for no reason at all.

[boston_clone]

> No one goes snooping to see what sites Joe visited this morning for no reason at all.

In fact, I have worked at several organizations in which this type of activity would be a terminable offense.