EDR quarantine removes the log shipper binary and blinds central visibility

Containment works on the compromised host, but the action also stops telemetry collection and makes the rest of the investigation much harder.