Endpoint Detection and Response

Anton Chuvakin of Gartner introduced the term Endpoint Threat Detection and Response (ETDR) in July 2013, defining it as “tools primarily focused on detecting and investigating suspicious activities (and traces of such) and other problems on hosts/endpoints.” Commonly known as Endpoint Detection and Response (EDR), it’s a relatively recent category of solutions often compared to Advanced Threat Protection (ATP) for its comprehensive security capabilities. EDR is an emerging technology that addresses the need for ongoing monitoring and response to advanced threats, making the case that it’s a form of advanced threat protection in itself.