Solved problem (by governments and industry). It's called Endpoint Detection and Response (EDR).

I'm not raising the bar btw, I'm just someone who works in the intersection of cybersecurity, government, and business.