Cybersecurity definition
What is XDR?
XDR stands for Extended Detection and Response.
By Cyber Tool Stack Editorial TeamUpdated
Definition
Extends endpoint detection and response by correlating telemetry from identity, email, and cloud systems alongside endpoint activity, so a single attack spanning multiple systems appears as one connected incident instead of scattered alerts.
Where XDR fits in the security landscape
These beginner lessons use this term while explaining the surrounding security control.
Related cybersecurity terms
EDREndpoint Detection and ResponseSoftware that continuously records what happens on endpoints (processes, files, network connections) and detects, investigates, and responds to malicious behavior.SIEMSecurity Information and Event ManagementA central system that collects logs from across an environment, correlates them into alerts using detection rules and behavioral baselining, and lets analysts search historical activity during an investigation.TelemetryThe stream of activity data — process starts, file changes, network connections — that an agent continuously records and sends to a central system for analysis.