{"id":4533,"date":"2021-07-12T09:59:29","date_gmt":"2021-07-12T14:59:29","guid":{"rendered":"https:\/\/www.stratospherenetworks.com\/blog\/?p=4533"},"modified":"2022-07-27T08:37:09","modified_gmt":"2022-07-27T13:37:09","slug":"what-is-xdr-your-guide-to-extended-detection-and-response","status":"publish","type":"post","link":"https:\/\/www.stratospherenetworks.com\/blog\/what-is-xdr-your-guide-to-extended-detection-and-response\/","title":{"rendered":"What is XDR? Your guide to extended detection and response"},"content":{"rendered":"

\"AnThe world of cybersecurity has become full of acronyms involving DR for \u201cdetection and response.\u201d You might have noticed product pages and articles mentioning network detection and response (NDR) and endpoint detection and response (EDR). In 2018, Palo Alto Networks co-founder and CTO Nir Zuk introduced a new term<\/a>: XDR, commonly defined as extended detection and response.<\/p>\n

This recently established security category includes solutions that bring together various DR tools to streamline the process and allow for more efficient detection and response, according to the Security Intelligence article \u201cWhat Is Extended Detection and Response (XDR)?<\/a>\u201d<\/p>\n

At a time when ransomware<\/a> is running rampant and hackers continue to develop increasingly sophisticated malware variants, it\u2019s vital to invest in offerings like XDR that allow your organization to detect, contain and eliminate advanced threats ASAP. If you\u2019re curious about how this type of cybersecurity solution<\/a> works and the advantages of deploying XDR for your business, here are the answers to some questions you might have and reasons to consider implementing extended detection and response.<\/p>\n

What is extended detection and response?<\/h2>\n

Extended detection and response solutions \u201cautomatically collect and correlate data from multiple security products to improve threat detection and provide an incident response capability,\u201d states the article \u201cGartner Top 9 Security and Risk Trends for 2020<\/a>.\u201d<\/p>\n

This kind of IT security offering can significantly bolster a security team\u2019s capabilities by taking in data from a wide range of sources, including cloud solutions, servers and email along with networks and endpoints, according to Cisco<\/a>.<\/p>\n

By combining detection and response solutions (i.e., SIEM, NDR and EDR) and leveraging open-system integration, XDR enables greater visibility across your company\u2019s environment (including networks and endpoints), Security Intelligence explains. Extended detection and response platforms can leverage automation, artificial intelligence and advanced analytics to help minimize the time it takes to detect and remediate threats.<\/p>\n

The difference between XDR and EDR<\/h2>\n

XDR goes beyond what an EDR solution can do by including a greater range of deployed security solutions, Cisco explains. EDR only offers insight into activity across various endpoints, while XDR has a much larger scope including not only endpoint security but also networks, servers, SIEM and beyond, according to the Forbes article \u201cEDR, XDR And MDR: Understanding The Differences Behind The Acronyms<\/a>.\u201d<\/p>\n

XDR vs. NDR<\/h2>\n

As for NDR, these types of security solutions focus on identifying and responding to threats within a network, according to VMware<\/a>. Again, XDR solutions offer more expansive detection and response capabilities and allow for data collection and threat hunting across various security layers, including networks, cloud, email and more.<\/p>\n

The benefits of XDR for businesses<\/h2>\n

Deploying an XDR solution can prove advantageous for security teams in many ways. According to VMware, Palo Alto, and Cisco, here are just a few of the most notable benefits of extended detection and response.<\/p>\n