2023-07-19T13:28:00Z

When evaluating EDR (Endpoint Detection and Response) solutions, what aspects are the most important to look for?

Hi community,

When evaluating EDR (Endpoint Detection and Response) solutions, what aspects are the most important to look for?

Share your thoughts with the rest of the community.


NV
Content Editor at a tech company with 51-200 employees
  • 1
  • 4
1
PeerSpot user
1 Answer
NV
Content Editor at a tech company with 51-200 employees
Real User
Top 5
2023-07-19T13:32:01Z
Jul 19, 2023

    The most important aspects to look for when evaluating EDR (Endpoint Detection and Response) solutions are:
    -Detection capabilities: The software should have advanced and effective detection mechanisms to identify and alert potential threats and malicious activities in real-time.
    -Response capabilities: It should provide a range of response actions to mitigate and contain threats, such as isolating affected endpoints, terminating malicious processes, or blocking suspicious network connections.
    -Integration and compatibility: The solution should seamlessly integrate with existing security infrastructure and be compatible with various operating systems and endpoint devices.
    -Scalability and performance: It should be able to handle a large number of endpoints without compromising performance, ensuring efficient monitoring and response across the entire network.
    -User-friendly interface: The software should have an intuitive and easy-to-use interface, allowing security teams to quickly navigate and analyze data, and initiate response actions.
    -Threat intelligence and analytics: It should leverage threat intelligence feeds and advanced analytics to enhance detection accuracy and provide actionable insights for proactive threat hunting.
    -Incident investigation and forensics: The solution should offer comprehensive incident investigation capabilities, including detailed endpoint activity logs, file analysis, and forensic data collection for post-incident analysis.
    -Reporting and compliance: It should provide customizable reporting features to generate compliance reports, security metrics, and executive summaries for effective communication and auditing purposes.
    -Continuous updates and support: The software should have a dedicated team that regularly updates the solution with the latest threat intelligence and provides timely support for any issues or queries.

Learn what your peers think about Cisco Secure Endpoint. Get advice and tips from experienced pros sharing their opinions. Updated: September 2023.
734,963 professionals have used our research since 2012.
Search for a product comparison in EDR (Endpoint Detection and Response)
Related Questions
SK
System Administrator at Navisite
Aug 16, 2023
Hello peers,  I am a System Administrator at a large tech vendor. I am currently researching EDR tools and wish to learn more about them. What is your experience with EDR solutions? What is the best way to work with EDR security as a SOC consultant? Thank you for your help.
2 out of 4 answers
Gerald Mbewa - PeerSpot reviewer
Cyber Security Analyst at DIgital Sentry Ltd
Aug 9, 2023
Working with Endpoint Detection and Response (EDR) security as a Security Operations Center (SOC) consultant involves a strategic and hands-on approach to effectively manage and respond to potential security threats and incidents. To effectively work with EDR security: Configure Tools: Set up EDR tools to monitor endpoints efficiently. Customize Rules: Tailor detection rules for specific threats. Monitor Continuously: Keep a watchful eye on endpoint activities in real time. Proactively Hunt: Actively seek hidden threats beyond automated alerts. Use Threat Intel: Integrate threat intelligence to enhance detection. Respond Swiftly: Quickly assess, contain, and mitigate incidents. Automate Tasks: Use automation for faster responses. Collaborate: Communicate and work with other teams. Analyze Post-Incident: Review incidents to learn and improve. Stay Updated: Regularly train and adapt to new threats. Iterate: Continuously refine strategies for better protection.
SS
Technical Engineer at a tech services company with 1,001-5,000 employees
Aug 9, 2023
Hi, EDR is the emerging technology that will help you to do RCA of any environment, and EDR does have the capabilities to detect unknown, script base or fileless attacks, even some of the EDR vendors have the capabilities to prevent the ongoing attack. It totally works on behaviour base analysis and the EDR agent will monitor everything individual process which are running in your endpoints. I do feel that every organisation should put the EDR to their environment because attacks are very sophisticated nowadays. It has the capability to do Incident Response as well which typically allows users to take remote access to endpoints and run some commands in order to do remote remediation.
NV
Content Editor at a tech company with 51-200 employees
Aug 9, 2023
Hi community, Why is EDR (Endpoint Detection and Response) important for companies? Share your thoughts with the rest of the community.
See 2 answers
NV
Content Editor at a tech company with 51-200 employees
Jul 19, 2023
EDR (Endpoint Detection and Response) is important for companies because:-It provides real-time visibility into endpoint activities, allowing companies to detect and respond to potential threats quickly.-EDR software helps in identifying and investigating security incidents, enabling companies to understand the scope and impact of an attack.-It enhances threat-hunting capabilities by continuously monitoring endpoints for suspicious behavior and indicators of compromise.-EDR solutions offer advanced threat detection and prevention mechanisms, including behavioral analysis and machine learning algorithms.-It helps in reducing the dwell time of threats by quickly identifying and containing malicious activities on endpoints.-EDR software assists in compliance management by providing detailed endpoint activity logs and reports.-It enables companies to proactively protect their endpoints against emerging threats and zero-day vulnerabilities.-EDR solutions can integrate with other security tools and systems, enhancing the overall security posture of the organization.-It aids in incident response and remediation by providing actionable insights and facilitating the isolation and removal of threats.-EDR software helps in improving the overall cybersecurity posture of the company, safeguarding sensitive data, and preventing financial losses.
Gerald Mbewa - PeerSpot reviewer
Cyber Security Analyst at DIgital Sentry Ltd
Aug 9, 2023
EDR (Endpoint Detection and Response) is vital for companies due to its ability to quickly detect, respond to, and prevent advanced cyber threats at the endpoint level. It offers real-time visibility, advanced threat detection, proactive threat hunting, swift incident response, and detailed endpoint insights. EDR strengthens security, reduces damage, aids compliance, and adapts well to remote work scenarios.
Related Articles
EB
Director of Community at PeerSpot (formerly IT Central Station)
Aug 17, 2022
Hi dear community members, In this edition of PeerSpot's Community Spotlight, you can find out what your peers are discussing and join in the conversation. Ask and answer questions on the topics that interest you most! Read and respond to articles or contribute your own! Trending These are the topics your peers are talking about on PeerSpot this week How do I estimate the requir...
See 1 comment
EB
Director of Community at PeerSpot (formerly IT Central Station)
Aug 17, 2022
Thank you to all the community members who share their knowledge with other peers! Also, special thanks to the articles' contributors included in this Community Spotlight: @Janet Staver, @Abhirup Sarkar, @Manoj Narayanan, @Beth Safire and @Shibu Babuchandran.
Shibu Babuchandran - PeerSpot reviewer
Regional Manager/ Service Delivery Manager at a tech services company with 201-500 employees
Aug 9, 2022
If you’re weighing your options for endpoint security solutions, there are many options out there. However, solutions vary greatly in terms of how effectively they can protect your network. I want to help you make the best decision possible, so here are some questions to ask before buying an endpoint security solution, and why they are important. 1) Does the solution employ Foundational Tech...
EB
Director of Community at PeerSpot (formerly IT Central Station)
Aug 2, 2022
Dear professionals, Welcome back to PeerSpot's Community Spotlight! Below you can find the latest hot topics posted by your fellow PeerSpot Community members. Read articles, answer questions, and contribute to discussions that are relevant to you and your expertise. Or ask your peers for insight on topics that interest you! Trending Here are some topics that your peers are discussi...
See 1 comment
EB
Director of Community at PeerSpot (formerly IT Central Station)
Aug 2, 2022
@Chris Childerhose, @PraveenKambhampati, @Deena Nouril, @Shibu Babuchandran and @reviewer1925439, Thank you for contributing your articles and sharing your professional knowledge with 618K PeerSpot community members around the globe as well as with a much bigger readers audience!
EB
Director of Community at PeerSpot (formerly IT Central Station)
May 2, 2022
Hi peers, We're happy to share our new bi-weekly Community Spotlight with you. Here you'll find recent contributions by PeerSpot community members: questions, articles and trending discussions. Trending See what your peers are discussing at the moment! What to choose: an endpoint antivirus, an EDR solution, or both? What is your recommended IT Service Management (ITSM) tool in 2022? W...
EB
Director of Community at PeerSpot (formerly IT Central Station)
Feb 4, 2022
Hi dear community members, This is our latest community digest. It helps you catch up on recent contributions by community members. Comment below with your feedback and suggestions! Trending What are the Top 5 cybersecurity trends in 2022? What are the main benefits of modern IT Asset Discovery tools? Tip Post an educational article from your Home feed and receive 20 point...
See 1 comment
reviewer1577907 - PeerSpot reviewer
Manager at PeerSpot
Feb 4, 2022
Thank you, these community Spotlights are very handy!
Related Articles
EB
Director of Community at PeerSpot (formerly IT Central Station)
Aug 17, 2022
Community Spotlight #20
Hi dear community members, In this edition of PeerSpot's Community Spotlight, you can find out w...
Shibu Babuchandran - PeerSpot reviewer
Regional Manager/ Service Delivery Manager at a tech services company with 201-500 employees
Aug 9, 2022
8 Questions to Ask While Selecting an Endpoint Security Solution for Your Business
If you’re weighing your options for endpoint security solutions, there are many options out there...
Download Free Report
Download our free Cisco Secure Endpoint Report and get advice and tips from experienced pros sharing their opinions. Updated: September 2023.
DOWNLOAD NOW
734,963 professionals have used our research since 2012.