Our first EDR paper is OUT!
by Augusto Barros | May 19, 2016 | Submit a Comment
It’s almost impossible to get ahead of Dr. Chuvakin on blog posts and announcing new research, but I’m lucky enough he is driving at this precise moment and not able to do it before me 
This document should be the “starting point” to anyone trying to understand what EDR tools are, what they should be used for and what to consider before implementing this technology. Key EDR use cases are incident-related search and investigation, suspicious activity detection, alert triage and validation, threat hunting, and stopping malicious activity.
Things you can find on this paper:
- EDR Definition
- EDR Key Capabilities
- Why did EDR tools appear?
- Building a Business Case for EDR
And much more. I hope you enjoy. Then next one is a comparison of the most visible EDR tools out there, it’ll be out in a few days.
Category: endpoint-detection-and-response incident-response threat-detection
Tags: edr new-research
Augusto Barros
Research Director
1 years at Gartner
19 years IT Industry
Become a Client
Talk to Gartner now and learn the benefits of becoming a Gartner Client
HOW WE CAN HELP
TRENDING TOPICS
Who's Blogging
- Jack Santos
- Andrew White
- Augusto Barros
- Andrew Lerner
- Robert Hetu
- Avivah Litan
- Cindi Howson
- Pete Basiliere
- David Yockelson
- Hank Barnes
- Anton Chuvakin
- Martin Kihn
- Carol Rozwell
- Jay Wilson
- Augie Ray
- Jake Sorofman
- Michael Shanler
- Kirsten Newbold
- Rajesh Kandaswamy
- Bruce Robertson
- Stephen White
- Jonathan Care
- Noah Elkin
- Julie Hopkins
- Business Continuity
- Michael Maoz
- Alan Waite
- John Wheeler
- Merv Adrian
- Jenny Sussin
- Homan Farahmand
- Svetlana Sicular
- Don Bulmer
- Stan Aronow
- Gregor Petri
- Nick Heudecker
- Annamaria Virzi
- Todd Berkowitz
- Jane Barrett
- Jennifer Polk
- Tad Travis
- Earl Perkins
- Mei Selvage
- Don Scheibenreif
- Andrew Frank
- Lydia Leong
- Jeffrey Mann
- Stephen Davies
- Diane Morello
- Mark Raskino
About
Comments or opinions expressed on this blog are those of the individual contributors only, and do not necessarily represent the views of Gartner, Inc. or its management. Readers may copy and redistribute blog postings on other blogs, or otherwise for private, non-commercial or journalistic purposes, with attribution to Gartner. This content may not be used for any other purposes in any other formats or media. The content on this blog is provided on an "as-is" basis. Gartner shall not be liable for any damages whatsoever arising out of the content or use of this blog.
