EDR endpoint isolation