In this module, students will examine the practical limitations of EDRs and the realities of bypass research. Students will learn why many EDR protections are constrained by stability, compatibility, and performance requirements, and how these constraints shape both defensive design and offensive research. The module discusses bypass thinking at a high level, including how attackers probe detection logic, why some protections are intentionally partial, and how research findings should be interpreted responsibly. Students will leave with a grounded perspective on EDR strengths and weaknesses, emphasizing understanding over exploitation.