What is EDR?
Endpoint Detection and Response. An integrated endpoint security solution that combines real-time continuous monitoring and collection of endpoint data with rules-based automated response.
Why it matters
Understanding this concept helps in grasping how modern networks and security systems operate, providing a foundation for more advanced topics.
Real-world Analogy
Like having a dedicated security guard assigned to constantly watch and protect every single employee in a company.
Other Dictionary Terms
Access Control List (ACL)
A list of rules that specifies which users or systems are granted or denied access to a particular object or system resource.
Dictionary TermAdvanced Persistent Threat (APT)
A stealthy threat actor, typically a nation state or state-sponsored group, which gains unauthorized access to a computer network and remains undetected for an extended period.
Dictionary TermARP Spoofing
A type of attack in which a malicious actor sends falsified ARP (Address Resolution Protocol) messages over a local area network.