EDR
Technology & Computing abbreviation · Cybersecurity
| Stands for | Endpoint detection and response |
|---|---|
| Categories | Technology & Computing |
EDR stands for Endpoint detection and response, a cybersecurity abbreviation.
Security software installed on laptops, servers and other endpoints that continuously records activity, detects malicious behavior and lets responders investigate and isolate machines remotely. CrowdStrike Falcon, Microsoft Defender for Endpoint and SentinelOne are leading products.
Example: EDR isolated the infected laptop from the network within a minute of the ransomware starting.
Usage notes
Gartner analyst Anton Chuvakin named the category in 2013. EDR goes beyond antivirus by focusing on behavior and investigation rather than known signatures, and attackers increasingly try to disable it, for example with vulnerable drivers. A faulty CrowdStrike update in July 2024 crashed about 8.5 million Windows machines, showing how deeply such agents hook into systems.
Related abbreviations
More cybersecurity abbreviations
- DPI – Deep packet inspection
- DSA – Digital Signature Algorithm
- E2EE – End-to-end encryption
- EAP – Extensible Authentication Protocol
- ECC – Elliptic-curve cryptography
- ECDSA – Elliptic Curve Digital Signature Algorithm
- FIDO – Fast Identity Online
- GPG – GNU Privacy Guard
- GRC – Governance, risk and compliance
- HMAC – Hash-based message authentication code
- HSM – Hardware security module
- HSTS – HTTP Strict Transport Security