As a core department of the Hong Kong Special Administrative Region Government overseeing food safety, environmental hygiene and public health regulation, the organization initiated Phase I of its EDR security initiative to protect approximately 1,300 PC and server endpoints running heterogeneous operating systems including Windows Server, RHEL, Ubuntu, SUSE and Windows PC. With cyberattacks against government agencies growing increasingly sophisticated, the department urgently required a comprehensive EDR (Endpoint Detection and Response) framework to deliver real-time detection, automated response and rapid forensics against advanced threats such as ransomware, fileless attacks and memory-based attacks. The solution was required to comply with HKSAR Government data localization mandates, ensuring all security audit data remained on-premises within jurisdictional boundaries; integrate seamlessly with the existing Active Directory domain environment; support an English-language management interface; and guarantee high availability of management nodes to maintain business continuity.