Endpoint Detection and Response (EDR) is a new security category defined by Gartner in 2013. It refers to protection of endpoints, such as such as a personal computers, or servers, helping security teams gain visibility into malicious activity on an endpoint, and remotely control endpoints to contain and mitigate attacks. Detection mechanism helps detect attacks on endpoint devices and provide security teams with fast access to information that can help investigate the attack. Response actions can automatically response to attacks by performing actions at the device level, such as quarantining the endpoint or blocking malicious processes.