Glossary: Endpoint, Application and Email Security

EDR (endpoint detection and response)

Also written: endpoint detection and response

Software with an agent on each device and a central console that records activity (telemetry), detects attack chains such as Word starting PowerShell, and lets the team respond, for example by isolating a laptop. It catches attacks that use no known bad file.