What specific component of EDR enables capturing endpoint system data to help correlate it with indicators of compromise?

During a weekly review, you identify multiple unresolved incidents in ICDm. You are tasked with improving visibility and response accuracy.
What steps should you take using ICDm capabilities? (Choose three)

What benefit does ICDm provide when managing remote endpoints?

Why is versioning important for SES Complete policies?

You are a security analyst managing SES Complete via ICDm. A ransomware attack is detected on several endpoints.
What actions should you take in ICDm to mitigate the impact and prevent further spread? (Choose three)