From the course: Introduction to SecOps on Google Distributed Cloud (GDC) by Google

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Endpoint Detection and Response (EDR)

Endpoint Detection and Response (EDR) - Google Cloud Platform Tutorial

From the course: Introduction to SecOps on Google Distributed Cloud (GDC) by Google

Start my 1-month free trial Buy for my team

Endpoint Detection and Response (EDR)

“

- [Instructor] EDR stands for Endpoint Detection and Response. The EDR system is a local security solution that acts on individual endpoints in order to make automated security decisions. These automated decisions include sending alerts and enabling proactive responses to mitigate potential threats. EDR can then integrate with the SIEM system for reporting purposes. By running security locally on the endpoint, EDR allows for continuous monitoring in real-time. This enables rapid detection of security events and a quicker response to incidents. Also, EDR reduces network latency by decentralizing log analysis. EDR enhances security oversight by supporting detection and response when endpoints are offline. So what is an endpoint? An endpoint refers to any computing device connected to the local network and use to operate, run workloads, or access the platform. An endpoint can then be the following: an infrastructure…

Contents