SECURITY

EDR

Agent-based software that continuously monitors laptops, servers, and workstations for suspicious behavior and lets analysts respond (isolate, kill, rollback).

IN PRACTICE

CrowdStrike, SentinelOne, and Defender for Endpoint are typical EDR platforms. Without one, your SOC is flying blind on the device tier.

← Back to glossary