@DJMRP @ainmosni Don't think that is possible with any EDR product. One of the selling points is near-realtime protection against emerging threats and there are dozens of updates every day.

Not saying this is great, just pointing out that "test every update" is not feasible for 99.9% of orgs.