// THREAT DETECTION AND DATA PRIVACY TERM
XDR
Extended Detection and Response (XDR) is a cybersecurity tool that collects and automatically correlates data from multiple security layers, such as endpoints, email, and cloud services. This unified view helps security teams detect and respond to complex threats faster than with separate, siloed tools.
TECHNICAL DEFINITION
Extended Detection and Response (XDR) is a unified security incident detection and response platform that integrates and correlates telemetry from multiple security domains like endpoint (EDR), network (NDR), cloud, and email security. By applying analytics and machine learning to this cross-domain dataset, XDR enhances threat visibility, automates investigation workflows, and enables coordinated responses to sophisticated cyberattacks across the entire IT ecosystem.
BACKGROUND
Vectra AI, Inc. is a cybersecurity company that uses AI for hybrid attack detection, investigation, and response (NDR) solutions. The company was established in 2011 and operates in 113 countries from its San Jose, California headquarters, with further locations in Singapore, Australia, and Japan.
READ MORE ON WIKIPEDIASYNONYMS & ALIASES
- Extended Detection and Response
- Cross-layered D&R
- Unified Threat Platform
- Threat Correlation
- Security Operations Platform
- Integrated D&R
USAGE NOTE
XDR is considered an evolution of EDR (Endpoint Detection and Response), expanding threat visibility from just endpoints to the entire technology stack.
DEVELOPERS
Organizations developing technology related to XDR.
A global cybersecurity leader known for its Cortex XDR platform, which integrates endpoint, network, and cloud data to stop sophisticated attacks.
Develops the Falcon platform, a cloud-native solution that unifies next-generation antivirus, endpoint detection and response (EDR), and a 24/7 managed hunting service, all delivered via a single lightweight agent.
Offers the Singularity XDR platform, which uses AI-powered prevention, detection, response, and hunting across endpoints, containers, cloud workloads, and IoT devices.
Provides Microsoft Defender XDR, a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications.
Formed from the merger of McAfee Enterprise and FireEye, Trellix provides a living XDR architecture that adapts at the speed of threat actors and delivers advanced cyber threat intelligence.
Offers Cisco SecureX, a cloud-native, built-in platform experience within their security portfolio that connects their integrated security products and the customer's infrastructure for a simpler, more consistent experience.
Develops the Trend Micro Vision One platform, an XDR solution that collects and correlates deep activity data across multiple vectors – email, endpoints, servers, cloud workloads, and networks.
Provides an operation-centric XDR platform that maps and correlates individual pieces of evidence into a full attack story, known as a MalOp (malicious operation), to provide context and remediation.
Offers an XDR solution that synchronizes native endpoint, server, firewall, email, and other security data. It's also a core component of their Managed Detection and Response (MDR) service.