Anthropic has introduced a beta integration that lets businesses run endpoint detection and response sensors inside Claude Cowork’s local virtual machine.

The feature addresses a monitoring gap: security software installed on a computer cannot see the shell commands and code Cowork runs inside its isolated environment. Teams can now send that activity to their existing security console.

The EDR integration supports Team and Enterprise plans on macOS and Windows. It also works with Claude Desktop connected to Amazon Bedrock, Google Cloud Vertex AI, or Microsoft Foundry. Anthropic’s setup guidance makes one limit clear: coverage applies only to the local VM, not Cowork sessions hosted on Anthropic’s servers.

Anthropic Enables EDR Monitoring

Cowork uses a virtual machine to separate code execution from the user’s computer. That boundary also prevents the host computer’s EDR sensor from inspecting activity inside the guest environment. Installing a sensor within the VM gives security teams visibility into work that otherwise sits beyond their existing endpoint monitoring.

The change matters as AI tools gain more freedom to act. Cybersecurity News previously covered Claude’s background computer use, which lets the assistant interact with desktop applications. That capability is distinct from sandboxed code execution, but both raise questions about how organizations monitor automated actions.

Earlier reporting on a Claude Cowork sandbox vulnerability also showed why activity inside these environments deserves attention. That research described a Windows attack chain leading to root access within the Linux sandbox. The new monitoring feature should not be confused with a fix for that reported flaw.

Each time the Cowork VM starts, Claude Desktop copies the configured sensor package into it. Desktop then checks the package’s signature against the approved key for the selected vendor. If validation succeeds, Claude runs the vendor’s installation script, at most once per VM startup. Without the setting, nothing is installed.

Approved vendors are CrowdStrike, Evoke Security, Neo, Palo Alto Networks, Pluto Security, SentinelOne, and Tanium. The installed sensor connects to its vendor’s cloud and reports activity. Its telemetry can leave the VM outside Cowork’s network allowlist, an important detail for teams reviewing outbound data flows.

Administrators need Claude Desktop version 4.4212.0 or later. Windows deployments require the MSIX build, Windows 10 or 11, hardware virtualization, and Virtual Machine Platform enabled.

Configuration uses mobile device management on macOS or registry policies on Windows, including Group Policy or Intune. Vendors provide their own packages and instructions.

The sensor can access prompts, files, Claude responses, and other content inside the VM. That data goes to the EDR vendor, not Anthropic. Organizations therefore need to review vendor data handling alongside detection coverage.

Anthropic also requires customers to test the software before deployment and after Claude or sensor updates. Removing management settings does not uninstall an existing sensor. It stops package execution at later VM starts. Package signatures expire within two years and do not cover updates downloaded afterward.

Anthropic charges nothing extra during beta, although vendors may charge. For defenders, the benefit is clearer local visibility, not complete coverage of every Cowork session.

Give your SOC the alert context to stops incidents quickly. Integrate Threat Intel from 16K SOCs.

The post Anthropic Enables EDR Monitoring in Claude Cowork to Detect Hidden AI Agent Activity appeared first on Cyber Security News.