All Standard features plus: Increased daily malware scan limits Ability to queue up batches of collected data for processing 1-month term licenses available Related How To Investigate Endpoints with Cyber Triage and Windows Defender DFIR Next Steps: What to do after you find a suspicious Windows Network Logon Session Windows Scheduled Tasks for DFIR Investigations DFIR Next Steps: What To Do When You Find Mimikatz Was Run