EDR
Currently antivirus firms use a range of Windows kernel drivers to do things like intercept network and file process activity
SecuSUITE not included in sale...
Redmond promises "more security capabilities to solution providers outside of kernel mode"
"In the hands of a distrustful tech, an EDR tool becomes little more than a flight recorder"