What is the Process of EDR?


EDR security solutions capture all endpoint and workload activity and events, giving security professionals the insight they need to find problems that might otherwise go undetected. In order to give continuous and complete visibility into what is occurring on endpoints in real time, an EDR system must provide systematic and comprehensive visibility.

EDR solutions should have advanced threat detection, investigation, and response capabilities, such as occurrence data search and inquiry alert triage, potential fraud verification, attack detection, and malicious activity identification and containment. Conventional Antivirus technologies are more basic in nature than novel EDR technologies and should be considered a major component of EDR protection.

Back ↵