Glossary: Logs and Data Sources for Investigations

EDR (endpoint detection and response)

Also written: EDR, EDR console

An agent program on each endpoint that records activity, such as programs started, their parents, command lines, files and connections, and can stop it. A central console lets you search every managed computer at once, for example for a file's hash.