Endpoint Detection and Response (EDR) is a security capability that collects endpoint telemetry, detects suspicious activity, and supports investigation and response. The acronym EDR is commonly used in security, IT, audit, and compliance work.
Endpoint Detection and Response (EDR) gives security, IT, compliance, and business teams a shared term for discussing protection, accountability, and operational risk.