Endpoint Detection and Response

Definition

Endpoint Detection and Response (EDR) is a security technology that continuously monitors endpoint devices, laptops, desktops, servers, to detect, investigate, and respond to threats that bypass traditional antivirus. EDR tools collect telemetry on processes, file changes, network connections, and user behavior, then use behavioral analytics to surface suspicious activity. EDR is increasingly bundled into broader XDR (Extended Detection and Response) platforms and is a foundational component of modern endpoint security strategies.