Okuzeka
Cybersecurity vocabulary · Security Operations and Monitoring

EDR

Meaning in cybersecurity, with examples

abbreviationCommon term

In cybersecurity, EDR means: Endpoint detection and response: security software on laptops and servers that records activity, detects suspicious behaviour and lets analysts investigate and respond remotely.

In Turkish: uç nokta tespit ve müdahale, EDR

How it is used

Said letter by letter. EDR goes beyond classic antivirus: from one console, analysts can see process trees, isolate a host from the network or stop a process. XDR extends the same idea to email, cloud and identity data.

Example sentences

  1. We used the EDR console to isolate the laptop within two minutes.

  2. The EDR flagged an unsigned script that tried to disable the security tools.

Common collocations

  • EDR agent
  • EDR console
  • EDR alert
  • isolate a host
  • XDR
  • endpointAny device that connects to a network and is used by people or runs workloads, such as a laptop, desktop computer, phone or server.
  • antivirusSecurity software that scans files and devices to detect, block and remove malware, using known signatures and suspicious behaviour.
  • SOCSecurity operations centre: the team, and often the room, that monitors an organisation's systems around the clock and responds to security alerts.
  • containmentThe stage of incident response in which the team stops an attack from spreading or causing more damage, for example by isolating infected machines.

This word in other fields

The same English word can have a different meaning in another field:

More terms: Security Operations and Monitoring

Practise with graded reading

Reading at the right level is the fastest way to make new words stick. Pick free English books by level: