Endpoint protection and response