EDR: How does the sensor determine what is the host_type of a device
Environment
EDR sensor: All supported versions
Windows: All supported OS
Question
How does the sensor determine what is the host_type of a device?
Answer
The "host_type" is collected from the structure under wProductType under OSVERSIONINFOEXA structure, more details can be found here: OSVERSIONINFOEXA (winnt.h) - Win32 apps
