Endpoint detection and response (EDR) – Focusing on the “R”

We already covered the latest advanced antivirus and anti-malware, which is called endpoint detection and response (EDR), in Chapter 5. It takes the traditional antivirus to the next level. Products such as CrowdStrike, SentinelOne, and MalwareBytes’ ThreatDown will sell the products based on multiple levels. Each level offers more protection, with the “R” actually providing your company with a 24/7 help desk for your employees’ endpoints. The help desk is there to provide you with help in the event of an endpoint-related incident and to get your endpoints back online. If an employee downloads malware or ransomware, then the help desk will help you recover the laptop and get back online. In some cases, the “R” acts as a remote Security Operation Center (SOC) for your company. Remember, when protecting your endpoints, this doesn’t just include your employee...