How do EDR solutions differ to endpoint protection products (EPP)? Endpoint Detection and Response (EDR) solutions and endpoint protection products (EPP) serve different purposes in the threat landscape. EPP products can only identify and block known threats; for example, by scanning the endpoint for malware.
EDR solutions, on the other hand, are designed to detect unusual activity on endpoints. EDR solutions install sensors or agents, which gather behavioral data to detect unknown malware vulnerabilities. This data is continually monitored, and most EDR solutions offer dashboard views and reports that alert you if a threat has been detected.
EPP products and EDR solutions co-exist to guarantee comprehensive protection for all cases.
For F-Secure's EDR solution, see F-Secure Elements Endpoint Detection and Response.