Snow Sensor is a lightweight, cross-platform endpoint detection and response (EDR) sensor developed by Arc4dia. It operates as part of the broader SNOW platform, which also includes SnowBoard (command system) and Snow Cloud. The sensor collects telemetry data from endpoint devices and applies proprietary threat detection algorithms to enable both micro and macro level detection and analysis of threat events. Data collected includes: - Native execution of binaries - Loading of modules - File system and registry changes - Network connections This continuous data collection is used to build analysis timelines and support threat investigation workflows. Data collection is lightweight: approximately 1.5–2.0 MB per day per machine (uncompressed), with approximately 500 KB per day per machine transferred to the cloud after compression. All data is encrypted using AES-256, with keys transmitted via 2048-bit RSA encryption. HTTPS transport is also implemented for secure data transfer.