Endpoint detection and response (EDR) systems provide the best protection against known and unknown threats by combining real-time continuous monitoring and collection of endpoint data with rules-based automated response and analysis capabilities. Antivirus software primarily focuses on known threats with occasional zero-day threat protection, thus it falls short against unknown threats compared to EDR. Network firewalls primarily protect the network perimeter and might not offer thorough protection for endpoint devices. Patch management is important for endpoint security, but it does not offer active protection against ongoing threats.