Managed Security
What is Endpoint Detection and Response?
Also known as: EDR
Endpoint detection and response is a security technology that continuously records endpoint activity and analyzes it to detect, investigate, and respond to suspicious behavior on devices such as laptops and servers. It matters because endpoints are common targets, and EDR provides the visibility needed to catch attacks that bypass preventive controls.
Example
EDR flags a process that encrypts files rapidly, matching ransomware behavior, and automatically quarantines the endpoint.
Reference: MITRE ATT&CK ↗
Related Clear Infosec services
Related terms
Have a question about endpoint detection and response in your environment? Talk to our team.