Endpoint detection and response

Tooling that records activity on devices, detects suspicious behaviour and lets analysts investigate and contain it.

Covers detection and response tooling whose telemetry comes from endpoint devices. Tooling that correlates endpoint, network, cloud and identity telemetry together is Extended detection and response.

Scheme

• Technologies and capabilities

Broader terms

• Endpoint security