Definition
Extended Detection and Response (XDR) is an approach that integrates information from multiple sources to detect Threats and support Incident response.
Human Explanation
XDR combines data from endpoints, networks, email, services and other systems to provide a broader view of organisational security.
Why it Matters
Combining information from several sources supports detection of complex attacks and reduces response time.
Conceptual Boundary
XDR is not simply an expanded EDR. It covers a much broader set of information sources and analytical mechanisms.
Practical Perspective
XDR's greatest benefit is connecting several apparently unrelated events into one view of an Incident.