It differs significantly from traditional tools of network security like firewalls and antivirus, which were basically about perimeter defenses. Traditional security tools are largely reactive in nature—they depend upon known signatures and rules to cue off threats. This contrasts with the way NDR solutions have to continuously monitor and analyze the raw network traffic to baseline what is normal; anything that doesn't fit is likely to be malicious.  NDR uses advanced analytics, including machine learning, based on threat detection capabilities other tools miss—much of which is internal or lateral to the network. This is very key, since most modern attacks now target the internal environment rather than directly breaching perimeter defenses. Modern NDR solutions provide full real-time visibility into every inbound and outbound network activity, thereby increasing the possibility of detecting and responding to threats within an organizational setup. In so doing, these tools become a crucial extension of the conventional security arsenal for an enterprise.