Endpoint detection and response (EDR), is an integrated endpoint security solution that combines Next Generation Antivirus , real-time continuous monitoring and collection of endpoint data with rules-based automated response and analysis capabilities.
The primary functions of an EDR security system are to:
• Monitor and collect activity data from endpoints that could indicate a threat
• Analyze this data to identify threat patterns
• Automatically respond to identified threats to remove or contain them, and notify security personnel
• Forensics and analysis tools to research identified threats and search for suspicious activities