Despite EDR being implemented, many companies are facing issues like time-consuming analysis and the number of incidents not decreasing. Intrinsic issues, like the need to improve skills and the selection of contractors, are different and not easily resolved. In the mid of expectations for early detection and early response to threats, we will explain how to maximize the effect of introducing EDR, along with the possibility of XDR.