EDR — Endpoint Detection and Response
Definition
Security technology that continuously monitors endpoint devices (workstations, servers) for malicious activity, providing real-time visibility and automated response.
Context & Usage
EDR replaced traditional signature-based antivirus with behavior-based detection. Major EDR products: CrowdStrike Falcon, SentinelOne, Microsoft Defender for Endpoint, Carbon Black. Light agent footprint (~1-5% CPU/RAM overhead). Cloud-managed with on-prem agents.
Examples
- CrowdStrike Falcon agent on Windows Server
- Microsoft Defender for Endpoint on Linux
Looking for EDR hardware?
Pro Disk Network stocks enterprise IT hardware spanning every category. Email sales@prodisknetwork.com with your requirements for a quote.