CrowdStrike isn't just an anti-virus/malware solution. It also provides observability into the running processes. It integrates into threat intelligence so you can take hashes of known bad processes and see if it exists across your fleet of devices.

It can isolate devices from a network and only allow the SOC access to investigate.