EDR (Endpoint Detection and Response) is the process of detecting of suspicious activities (anomaly-based) and response to the advanced threats. Microsoft Defender for Endpoint (previous Microsoft Defender ATP) is the post-breach EDR solution from Microsoft.