Endpoint Detection And Response
Endpoint Detection and Response (EDR) is a category of security software that continuously monitors laptops, servers, and other endpoints for suspicious activity, and provides tools to investigate and automatically respond to detected threats.
12 resources across 1 library
Glossary Terms(12)
CrowdStrike
CrowdStrike is a cybersecurity company best known for its Falcon platform, a cloud-native endpoint protection solution that combines antivirus, EDR, and threat…
SentinelOne
SentinelOne is a cybersecurity company that provides an AI-driven endpoint and extended detection and response (XDR) platform called Singularity, designed to a…
Elastic Security
Elastic Security is a security solution built on the Elastic Stack (Elasticsearch, Kibana) that combines SIEM, endpoint security, and threat hunting capabiliti…
Endpoint Detection and Response (EDR)
Endpoint Detection and Response (EDR) is a category of security software that continuously monitors laptops, servers, and other endpoints for suspicious activi…
Extended Detection and Response (XDR)
Extended Detection and Response (XDR) is a security approach that unifies detection and response data across endpoints, networks, email, identity, and cloud wo…
Security Information and Event Management (SIEM)
Security Information and Event Management (SIEM) is a platform that aggregates, correlates, and analyzes log and event data from across an organization's IT en…
Security Orchestration, Automation and Response (SOAR)
Security Orchestration, Automation and Response (SOAR) is a category of security platforms that automates repetitive incident-response tasks and orchestrates w…
Blue Team
A blue team is the group of security professionals responsible for defending an organization — detecting, responding to, and mitigating security threats, inclu…
Threat Hunting
Threat hunting is the proactive, human-led practice of searching through an organization's systems and networks for signs of malicious activity that automated…
Ransomware
Ransomware is a type of malware that encrypts a victim's files or systems and demands payment, usually in cryptocurrency, in exchange for the decryption key ne…
Rootkit
A rootkit is a type of malware specifically designed to hide its own presence and the presence of other malicious software or activity on a compromised system,…
Botnet
A botnet is a network of internet-connected devices infected with malware that allows an attacker to control them remotely and en masse, typically without the…