EDR, MDR & XDR Explained

Ғылым және технология

Traditional antivirus is no longer sufficient to protect you. Everyone running a business should upgrade to EDR, MDR, or XDR immediately; but what is the difference between them, and how do SIEM and SOAR fit into the picture? Time to unravel the acronyms!
📄 Acronym cheat sheet:
EDR: Endpoint Detection and Response
MDR: Managed Detection and Response
XDR: eXtended Detection and Response
MXDR: Managed eXtended Detection and Response
SIEM: Security Information and Event Management
SOAR: Security Orchestration, Automation, and Response
SOC: Security Operations Centre
MSP: Managed Services Provider
MSSP: Managed Security Services Provider
💬 *Follow* *Me*
AndrewMRQuinn
Video timestamps:
0:00 - EDR
3:11 - MDR
4:41 - XDR
5:33 - Comparison with SIEM + SOAR
9:20 - Summary
#EDR #MDR #XDR #SIEM #SOAR #CyberSecurity #SOC #MSSP

Пікірлер: 42

  • @rockychau2451
    @rockychau24513 ай бұрын

    one of the best explanation so far on KZread

  • @ProTechShow

    @ProTechShow

    3 ай бұрын

    Thanks 🙂

  • @Wahinies

    @Wahinies

    26 күн бұрын

    Yes and I am catching it at the perfect time. Many thanks @ProTechShow

  • @nitram419
    @nitram4199 ай бұрын

    Many thanks indeed for a great tutorial! I just have a question about the restoring the system image created using the built-in Windows backup tool **to a brand new SSD**. Here's my scenario: ~ I have one NVMe SSD slot, with my OS C: drive on it. ~ In Windows I make an system image of the above, using the Windows backup tool; ~ I also make a Windows DVD bootable DVD (ie. with the recovery tools). ~ I turn off & unplug the PC and remove the old NVMe drive. ~ I insert a brand new and bigger NVMe drive in the slot where the old one used to be. ~ I boot the machine using the DVD-ROM Windows bootable recovery tools disk. Question: How do I get the image onto the brand new unformatted NVMe drive, and assign it as the "C" drive? Most grateful for your advice!

  • @neomatrix2091
    @neomatrix20914 ай бұрын

    Very nice breakdown, i appreciate your effort on presenting these concepts on a simplified manner for us to understand!

  • @ProTechShow

    @ProTechShow

    4 ай бұрын

    Thanks!

  • @marcioguedescavalcante3094
    @marcioguedescavalcante30948 ай бұрын

    Oh man, thank you so much to make this!

  • @ProTechShow

    @ProTechShow

    8 ай бұрын

    You're welcome. Glad it's of use!

  • @andrewmurray5255
    @andrewmurray52559 ай бұрын

    Amazing breakdown. Thank you!

  • @ProTechShow

    @ProTechShow

    9 ай бұрын

    Thanks. Glad it's useful!

  • @wizardofwifi
    @wizardofwifi5 сағат бұрын

    This is a great summary of these topics, Cybersecurity 101 foundation, simply explained!

  • @ProTechShow

    @ProTechShow

    4 сағат бұрын

    Thank you 🙂

  • @user-ur5br3ne9h
    @user-ur5br3ne9h4 ай бұрын

    excellent high level explanation of these technologies.

  • @ProTechShow

    @ProTechShow

    4 ай бұрын

    Thanks!

  • @MENTOKz
    @MENTOKz6 ай бұрын

    thanks man just starting to learn are XDR tool trend micro one

  • @richlab2927
    @richlab29272 ай бұрын

    Love your explanation. You made it simple

  • @ProTechShow

    @ProTechShow

    2 ай бұрын

    Thanks! Glad it's useful.

  • @notevenfalse
    @notevenfalseАй бұрын

    A+ content mate. All I can say is thank you.

  • @ProTechShow

    @ProTechShow

    Ай бұрын

    Thanks 🙂

  • @Israelxox
    @Israelxox5 ай бұрын

    Underrated video! Thanks 🙏

  • @ProTechShow

    @ProTechShow

    4 ай бұрын

    Thanks for watching!

  • @eek0212
    @eek02122 күн бұрын

    I was sick of all those security acronym terms, thanks for the video mate

  • @ProTechShow

    @ProTechShow

    2 күн бұрын

    You're welcome. Glad it was useful.

  • @hammamiahlem9792
    @hammamiahlem97922 күн бұрын

    amazing explanation ! thank you

  • @ProTechShow

    @ProTechShow

    2 күн бұрын

    Thanks!

  • @user-kn3yr3sg7x
    @user-kn3yr3sg7x10 ай бұрын

    Thank you for video 😊

  • @ProTechShow

    @ProTechShow

    10 ай бұрын

    You're welcome 🙂

  • @asdkjh4370
    @asdkjh437010 ай бұрын

    Thanks for video. Many thanks for valuable advice. Something on OpenHAB maybe? I'm looking for something to switch from HA which is going strange way. Any new updates?

  • @ProTechShow

    @ProTechShow

    10 ай бұрын

    OpenHAB 4 is expected to land in a couple of weeks. 2 and 3 were quite significant updates, so it'll be interesting to see what 4 brings to the table.

  • @elijahcrawford3049
    @elijahcrawford304915 күн бұрын

    ....and now my 8 page research paper due today makes sense.....thank you!

  • @ProTechShow

    @ProTechShow

    12 күн бұрын

    You're welcome

  • @EducateWithMe573
    @EducateWithMe57317 күн бұрын

    Edr End Point Response, Adr data breach, for future & Rdr are all separate packages of…?

  • @riccardo1434
    @riccardo14343 күн бұрын

    Hello, I've got some questions: is EDR a software agent that needs to be installed on each endpoint? while XDR is centralized or does it need to be installed on every endpoint like EDR? In order to monitor endpoint, firewall, cloud, network, etc. etc. activities to perform analysis, threat intelligence and response? Also, does XDR need EDR to collect activity information or does it completely replace EDR?

  • @ProTechShow

    @ProTechShow

    2 күн бұрын

    Usually, EDR is a software agent that gets installed on endpoints and checks in to a central location, similar to most business antivirus solutions. XDR does this as well, but additionally consumes data from other devices - usually via API calls or syslog.

  • @kaentertainment2215
    @kaentertainment22152 ай бұрын

    How does EDR defend against Zero Day Exploits given its primary focus on detecting suspicious patterns from historical occurrences?

  • @ProTechShow

    @ProTechShow

    2 ай бұрын

    Let's say you have an internet-facing web app with a zero-day vulnerability. It gets exploited to drop a web shell onto the server. The vulnerability was previously unknown, and the web shell doesn't match any known malware patterns. EDR/antivirus may not initially detect the exploit or the web shell as malicious, but EDR will see the file creation/modification by the web server process, followed by it attempting to spawn child processes or execute commands that are not typical behaviour of a web server. It doesn't require knowledge of the vulnerability itself to detect suspicious behaviour resulting from its exploitation and take action - raising an alert, removing the file, isolating the system, etc.

  • @EducateWithMe573
    @EducateWithMe57317 күн бұрын

    mDR eDR & xDr , what is the diff?

  • @ChapalPuteh_
    @ChapalPuteh_3 ай бұрын

    We use only XDR and EDR to operate our incident in the network ..

  • @paulj9657
    @paulj96573 ай бұрын

    Not acronyms. They are initialisms. :-) Great info. Thanks.

  • @ProTechShow

    @ProTechShow

    3 ай бұрын

    You are... correct. They are initialisms.

  • @paulj9657

    @paulj9657

    3 ай бұрын

    Sorry, my dad was an English teacher. :-). I'm not that pedantic in real life.

  • @iamagastya0
    @iamagastya0Ай бұрын

    i think toyota have better CooL cars