Defensive Security (Blue Team) / Hardening
Lesson 13 of 32
Endpoint protection
Antivirus has grown into EDR (endpoint detection and response): software that watches behaviour on each device, blocks bad activity and records what happened.
Key points
- EDR watches behaviour, not just files
- Defender, CrowdStrike, SentinelOne
- Alerts go to the security team
Quiz · +10 XP
What does EDR stand for?
Log in to save progress and earn XP.