Extended Detection and Response
XDR extends the EDR idea beyond endpoints, correlating telemetry from email, cloud, identity, and network sources into unified detections. Instead of stitching alerts together by hand, analysts see one incident that spans multiple layers of the environment. It matters because modern attacks cross many systems, and siloed tools miss the full picture.