Find the definition of the most commonly used cyber security terms in our glossary below.

What is Endpoint Detection and Response (EDR) in cyber security?

EDR is a security solution that combines real-time continuous monitoring and collection of endpoint data with rules-based automated response and analysis capabilities. EDR tools record and store endpoint system level behaviors, use various data analytics techniques to detect suspicious system behavior, provide contextual information, block malicious activity, and provide the automatic response to identified attacks. Organizations employ EDR solutions to increase visibility into endpoint data, and enhance their ability to detect, investigate and respond to threats early.