Activated Charcoal: Making sense of endpoint data