Endpoint Detection and Response (EDR)

Endpoint↗ detection and response (EDR) is security software that continuously monitors laptops, servers, and other devices for suspicious behavior, then gives security teams the visibility and tools to investigate and respond quickly, isolating an infected machine or killing a malicious process remotely.

EDR goes well beyond traditional antivirus↗ by detecting unfamiliar, behavior-based threats rather than only known malware↗ signatures, and by recording detailed activity logs that let responders reconstruct exactly what an attacker did.