EDR

EDR, endpoint detection and response, is software on computers and servers that watches for suspicious behaviour and helps stop and clean up attacks.

EDR: EDR, or endpoint detection and response, is security software that runs on laptops, desktops and servers, which are called endpoints. It records what programs do, spots suspicious behaviour, such as a file locking many documents, and helps a team stop the attack and clean up.

An old-style antivirus compares files with a list of known bad ones. EDR looks at actions. If a document starts a hidden tool that contacts a strange server, it raises an alarm. Small offices in India use it more now, often through a service provider, because ransomware can stop work for days. Home users do not usually need it, but small offices handling customer data may.

EDR is not a magic shield. It needs someone to read alerts and act, and it must be installed on every machine. For a home user, the equivalent is simple: keep the operating system and browser updated, use the built-in security tools, avoid pirated software, and keep a backup. It adds a way to look back at how an attack began, which helps stop it happening again.

Tips

• Keep Windows or macOS and your browser updated, and leave built-in security on.
• Avoid pirated software, which often carries hidden malware that tools may catch late.
• Back up your files so recovery does not depend on one tool.

Related terms