Endpoint Detection and Response (EDR) is a type of security solution that continuously records, stores, and monitors endpoint data in real-time to detect anomalous endpoint behavior.
As soon as suspicious behavior is detected, EDR software solutions automatically trigger alerts. By analyzing this information, security teams can also manually isolate, investigate and respond to a variety of sophisticated cyber threats targeting specific network endpoints.
Seven best endpoint detection and response products:
However, one weakness in EDR is the ability of malicious software to start doing damage before security teams respond if it is already present on the endpoint.