Where would you spend your 2018 IT Security Budget - This inforgraphic might help you

Anti-Virus Dead, What Next ? - EndPoint Protection Protection

I don't remember when  I used the term AV, Endpoint Protection was alwaays the right term. The problem is top AV vendors just renamed their product from AV to EP and did not offer any useful functions related to investigation and recovery.

The link has an interesting view from Securosis on endpoint protection

The link (PDF)below has more information:-

https://securosis.com/assets/library/reports/Securosis_AdvancedEndpointServerProtection_FINAL-multi.pdf