Endpoint detection and response, or endpoint threat detection and response (ETDR), is a security solution designed to monitor the network in real-time for threat. EDR provides rule-based and automated response to threat after detecting and investigating suspicious activity on endpoints and hosts. Security teams use EDR to simplify network security processes and free up time for more productive and business-centric tasks. Primary functions of an EDR system include: Monitor traffic and data from endpoints for anomalies or patterns that might indicate a threat or breach; Automatically respond, remove, or contain all threats or malicious files, and notify security staff of their presence and risk to the network; Use analytics tools designed to research prominent threats and search for their signatures