EDR troubleshooting