Endpoint Detection and Response (EDR) — Endpoint Detection and Response monitors devices for suspicious activity and supports investigation and containment. It collects information such as process behavior, file changes, and network connections. Security teams use these records and response capabilities to identify and limit compromises.

Added November 6, 2026