A study testing endpoint detection and response (EDR) products from 18 vendors finds state-of-the-art EDRs fail to prevent or log the bulk of common attacks.