An Endpoint Detection and Response (EDR) prevents attacks by monitoring endpoints, collecting data, and detecting suspicious activity. It’s flagged, investigated, and eventually studied by the EDR solution to prevent further attacks of that exact nature.