Endpoint Detection and Response
EDR software runs on laptops, servers, and workstations to record activity and detect malicious behavior that traditional antivirus misses. SOC teams use it to investigate what happened on a machine and to isolate or remediate compromised endpoints remotely. It matters because most attacks eventually touch an endpoint, making it a critical place to watch.