Endpoint Detection and Response: How to be 1% Strong