SECURITY

XDR

An evolution of EDR that correlates signal across endpoint, identity, email, cloud, and network, giving analysts a unified story rather than 5 separate alerts.

IN PRACTICE

An XDR platform sees 'phishing email + new sign-in from new country + unusual SharePoint download' as one incident. An EDR would miss the first two.

← Back to glossary