EPP and EDR usually hook the OS kernel to monitor system calls and other events, but that isn’t possible on ChromeOS. More importantly, the Chrome browser has a self-contained execution environment composed of “helpers” (e.g., the DOM renderer, the JavaScript Engine, etc.) that are completely opaque to EPP and EDR.

