What is the difference between an EDR and an IDS, and how do they complement each other in an investigation?
