Glossary · Information security
EDR (Endpoint Detection and Response)
Software on laptops, servers, and devices that continuously monitors for malicious activity and helps responders investigate and contain it.
Put the term into practice: ISMS software
Endpoint detection and response goes beyond traditional antivirus by recording endpoint activity and looking for behaviour that signals an attack, such as unusual process execution or lateral movement. It gives security teams the visibility and tools to isolate a compromised device and investigate what happened.
EDR is a key detective and responsive control and a common source of evidence during incident response.
