Glossary
Extended detection and response (XDR)
Also called XDR.
Definition
Extended detection and response collects and correlates security data from endpoints, identities, email, cloud and network in one system to detect, investigate and respond to threats.
Why it matters when you’re buying
XDR grew out of endpoint detection and response (EDR) and aims to cut the time analysts spend piecing alerts together. Products vary in how open they are to data from other vendors, which matters if you don’t buy everything from one supplier.
How it relates to other terms
XDR overlaps with a SIEM but focuses on detection and response rather than long-term log storage, and it is a main line of defence while a zero-day has no patch.
Where to go next
- Security: news, companies and community questions
- How to evaluate Security vendors: criteria, questions to ask and red flags
- Ransomware and malware: the latest stories and threads on this topic
Written by Techarda editors · Updated . Think a definition is wrong or missing something? Email engage@techarda.com. All terms.