Forrester defines XDR (Extended Detection and Response) as “the evolution of EDR” (Endpoint Detection and Response). XDR is a cloud-native platform that optimizes threat detection, investigation, response, and hunting in real time, with scalability and opportunities for automation.
Some vendors continue to debate exactly what XDR is. Is it a product? An approach to security? Some use the XDR acronym, but it’s not clear they have the capability yet. Others say that, whatever it is, it’s on a collision course with SIEM (Security Information & Event Management). In fact, maybe it is a SIEM. It’s confusing out there. This guide is here to help.