Glossary: Monitoring Tools and the Identity Life Cycle
EDR (endpoint detection and response)
Also written: EDR, endpoint tools
Software on laptops and servers that detects and responds to attacks. At Kettle & Crane it showed the attacker using the local Administrator account to sign in to other laptops.