Public API
ESET Enterprise Inspector具有一個API，該API允許訪問和導出檢測及其補救，以實現與SIEM，SOAR，票證工具等工具的有效集成。

遠程訪問
ESET Enterprise Inspector具有遠程PowerShell功能，允許安全工程師遠程檢查和配置其組織的電腦，因此可以在不中斷用戶工作流程的情況下獲得複雜的響應。

一鍵式隔離
定義網絡訪問策略以快速阻止惡意軟件的橫向移動。 只需在ESET Enterprise Inspector界面中單擊一下，即可將受感染的設備與網絡隔離。 另外，輕鬆將設備從收容狀態中移除。 

MITRE ATT&CK™
ESET Enterprise Inspector references its detections to the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK™) framework, which in one click provides you with comprehensive information even about the most complex threats.

Anomaly and behavior detection
Check actions carried out by an executable and utilize ESET’s LiveGrid® Reputation system to quickly assess if executed processes are safe or suspicious. Monitoring anomalous user-related incidents are possible due to specific rules written to be triggered by behavior, not simple malware or signature detections. Grouping of computers by user or department allows security teams to identify if the user is entitled to perform a specific action or not.

Tagging
Assign and unassign tags for fast filtering to EEI objects such as computers, alarms, exclusions, tasks, executables, processes and scripts. Tags are shared among users, and once created, they can be assigned within seconds.

Multiple Indicators of compromise
View and block modules based on over 30 different indicators, including hash, registry modifications, file modifications and network connections.

多平台覆蓋
ESET Enterprise Inspector支援Windows和macOS，使其成為多平台環境的理想選擇。

Threat Hunting
應用數據過濾器根據文件的受歡迎程度，信譽，數字簽名，行為或上下文信息對它進行排序。 Setting up multiple filters allows automated, easy threat hunting, including APTs and targeted attacks, which is customizable to each company’s environment. By adjusting behavior rules, ESET Enterprise Inspector can also be customized for Historic Threat Hunting and “rescan” the entire events database.

開放式架構和集成
ESET Enterprise Inspector提供了獨特的基於行為和信譽的檢測，對安全團隊完全透明。 All rules are easily editable via XML to allow fine-tuning or easily created to match the needs of specific enterprise environments, including SIEM integrations.

Investigation and Remediation
Use a built-in set of rules or create your own rules to respond to detected incidents. Each triggered alarm features a proposed next step to be performed for remediation. This quick response functionality helps to ensure that any single incident will not fall through the cracks.

Company Policy Violation Detection
Block malicious modules from being executed on any computer in your organization’s network. ESET Enterprise Inspector’s open architecture offers the flexibility to detect violations of policies about using specific software like torrent applications, cloud storage, tor browsing or other unwanted software.

Scoring
Prioritize the severity of alarms with scoring functionality that attributes a severity value to incidents and allows the admin to quickly identify computers with a higher probability of a potential incident.

Data collection
View comprehensive data about a newly executed module, including time of execution, user who executed, dwell time and attacked devices. All data is locally stored to prevent sensitive data leakage.