Extended Detection and Response (XDR)

Extended Detection and Response, or XDR, is an integrated approach to detecting and responding to cyber threats. It centrally collects and analyses security data from multiple areas of an IT infrastructure. These can include endpoints, servers, networks, cloud services, email systems and identity services. By correlating events from different sources, XDR can identify complex attack patterns that might remain undetected when individual security systems are analysed separately. This provides security teams with broader visibility into potential attacks and their progression across the environment. XDR platforms typically support threat detection, security incident investigation and automated response capabilities. They are commonly used within Security Operations and can complement existing security technologies such as EDR, SIEM and Threat Intelligence.