Endpoint Detection & Response (EDR)

Endpoint Detection and Response, or EDR, is a technology and solution that continually monitors and responds to mitigate cyber threats.

It protects endpoints by gathering data from endpoint devices, and then analyses the data to reveal potential cyber threats and other issues. It is a protection against hacking attempts and from the theft  of user data.

The software is installed on the end-user device and it is continually monitored. The data is stored in a centralized database. In an incident when a threat is found, the end-user is immediately prompted with a preventive list of actions.

This approach is different from an anti-viral oneirus that monitors the behavior of the system and takes action based on the signatures of already known malwares. As a result of this, it can be deployed in environments where they are isolated from the internet.

Because it is behavior-based, it monitors not only executables but scripts and commands that are normally available on every endpoints while monitoring for abnormalities.