An endpoint sensor is a lightweight software agent installed on individual devices, such as laptops, desktops, or servers, within a network. Its primary function is to continuously monitor, collect, and transmit security-related data from the device to a centralized security platform or management console. Endpoint sensors gather information such as system activity, running processes, network connections, file modifications, and potential indicators of compromise. This data enables security teams to detect, investigate, and respond to threats in real time, facilitating rapid incident response and proactive defense. Endpoint sensors are essential components of endpoint detection and response (EDR) and extended detection and response (XDR) solutions.