Response Glossary

Browse 13 response terms defined in plain English, from the cultural dictionary of computing.

13 Response Terms

Active Defense
A defensive approach that goes beyond passive monitoring by actively disrupting, detecting, misleading, or containing attackers during an intrusion attempt....
Auto-Remediation
Auto-Remediation is the automated correction of security findings such as misconfigurations, drift, or missing controls after detection. Security teams use it...
Cyber Incident
A security event that actually threatens or impacts the confidentiality, integrity, or availability of systems or data and therefore requires formal response....
EDR
EDR is endpoint detection and response tooling that records endpoint telemetry and supports investigation and containment. Security teams use it to enforce...
Endpoint Detection and Response
Endpoint Detection and Response is technology and workflows that collect endpoint telemetry and support investigation, hunting, and containment. Security teams...
Extended Detection and Response
Extended Detection and Response is a security operations capability that correlates endpoint, identity, email, cloud, and network telemetry for response....
Kill Switch
Kill Switch is a built-in mechanism that disables functionality quickly under defined emergency or abuse conditions. Security teams use it to enforce trust,...
NDR
NDR is network detection and response tooling that analyzes network activity to detect intrusions and support response. Security teams use it to enforce trust,...
Network Detection and Response
Network Detection and Response is the collection and analysis of network telemetry to detect malicious behavior and support investigation. Security teams use...
Real-Time Response
Immediate defensive action taken as an attack or suspicious event unfolds, often with automated or near-automated containment. Real-time response is important...
Response Playbook
A detailed, scenario-specific set of instructions for responding to a certain class of security event, often including evidence sources, decision trees,...
SOAR
Security orchestration, automation, and response platforms coordinate tools and automate investigation or containment workflows. It shows up in application...
XDR
Extended detection and response, an approach that correlates telemetry across endpoints, email, identity, and network tools. It shows up in application...

Related Topics