Dashboard Learn Daily Drop Build Machines Glossary

Messages My Notes Resources Support us Settings

0day streak

0pts

Copilotfree, in-browser

Ask me anything about your lessons or your code.

“What is a port?” · “Why is my code erroring?”

EDR

Blue Team and Defense

Endpoint detection and response. An agent installed on laptops and servers that records what programs do, flags suspicious behavior, and lets a responder cut the machine off the network remotely. It sees things the network never shows, like a document spawning a command shell.

Related terms

Appears in(16)

Payloads with msfvenomThe Metasploit Framework
Automated EnumerationLinux Privilege Escalation
Hunting for CredentialsWindows Privilege Escalation
Detection and TriageIncident Response
What a SOC Actually DoesSOC Analyst Fundamentals
Indicators vs BehaviorsThreat Hunting
Writing the Analysis ReportMalware Analysis
Security FrameworksGovernance, Risk, and Compliance
What Threat Intelligence Actually IsCyber Threat Intelligence
The Intelligence LifecycleCyber Threat Intelligence
Putting CTI to WorkCyber Threat Intelligence
What Detection Engineering IsDetection Engineering
Testing and Tuning DetectionsDetection Engineering
Defending Connected DevicesIoT and OT Security
Building a Vuln Management ProgramVulnerability Management
Phishing Defense in DepthEmail Security