It sounds like you're referring to a — likely in the context of cybersecurity, threat hunting, or red teaming.
Standard EDRs struggle because: