Endpoint Detection and Response (EDR)

Endpoint Detection and Response (EDR) can be seen as the next generation of Anti-Virus solution, but also provides additional capabilities beyond stopping viruses. An EDR product should additionally be able to block malware and fileless exploits against your endpoints, whilst providing enhanced visibility into what each endpoint is accessing and how the applications on it are behaving. The data that is being gathered can then be collated with data from all protected assets and further analysis can take place to look for threats which may be previously unknown or difficult to detect in isolation. When threats are detected, an EDR product will also be able to provide a response in the form of either a remediation of the issue or potentially isolation of the compromised endpoint. The capabilities of the EDR products are ever increasing with data being ingested from more endpoints and network segments, allowing for previously impossible data analytics across your whole estate.