Red Canary supports the same platforms and operating system (OS) versions as the platforms we use for Endpoint Detection and Response (EDR) and Endpoint Protection Platform (EPP). Please refer to the vendor-specific resources below for the most up-to-date information.

VMware Carbon Black EDR 

Organizations most commonly run Carbon Black EDR on the following platforms:

• Windows Operating Systems and Respective Sensors (desktop)
• Windows Operating Systems and Respective Sensors (server)
• Linux
• macOS

VMware Carbon Black Cloud

• Windows Operating Systems and Respective Sensors (desktop)
• Windows Operating Systems and Respective Sensors (server)
• Linux
  • Endpoint Standard
  • Enterprise EDR 
    • Note: Required for telemetry collection
• macOS

Cortex

For more information, see Endpoint Operating Systems Supported with Cortex XDR and Traps.

CrowdStrike Falcon

• Supported Operating Systems 
  • Note: Requires access to CrowdStrike Support Portal

Linux EDR

• System requirements for Linux EDR

Microsoft Defender for Endpoint

• Windows
• Linux
• macOS

Cortex XDR

• Endpoint Operating Systems Supported with Cortex XDR and Traps

Jamf

• General Requirements

SentinelOne

• SentinelOne User Guide 
  • Note: System requirements are on pg. 187 of 3246