From the course: CompTIA A+ Core 2 (220-1202) Cert Prep

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Antimalware

Antimalware

From the course: CompTIA A+ Core 2 (220-1202) Cert Prep

Start my 1-month free trial Buy for my team

Antimalware

“

- As security policies evolve, so do the tools we use to manage security services. Large organizations might handle security management in-house but many companies are turning to third party security management to detect vulnerabilities, threats, attacks and respond effectively. These services are often delivered through four key technologies, EDR, XDR, MDR and MXDR. Let's take a closer look at each. First off, we have EDR or endpoint detection and response. It is a proactive security approach. It scans and monitors endpoint devices like network servers for potential security threats. EDR uses tools like cyber threat intelligence, machine learning and automation to catch both existing and potential threats that traditional endpoint protections might miss. An EDR solution usually includes incident triage, filtering out false positives so security teams can focus. Threat hunting, actively searching for hidden threats. Data aggregation, gathering the data needed to make informed…

Contents