Introducing a better category of detection and response tools: XDR. XDR stitches together data from the endpoint, network, and cloud in a robust data lake. Applying advanced machine learning and analytics, it identifies threats and benign events with superior accuracy and gives analysts contextualized information, simplifying and accelerating investigations.
"XDR" emerged as a market category in response to this complexity, the basic premise being a simple one: XDR is a category of threat detection, investigation, and response solutions that work across all threat vectors in a company's infrastructure (i.e., network, endpoint, and cloud), rather than just one piece thereof. By increasing integration, XDR tools also increase visibility and insight for both for the machine learning models powering them and the security analysts using them.
This Guide will clearly demonstrate:
- Endpoint Detection and Response Solutions (EDR)
- Security information and event management (SIEM)
- User and entity behavior analytics (UEBA)
- Network traffic analysis (NTA)