Endpoint Monitoring
Noun · Security & Infosec
Definitions
The continuous collection and review of device-level events such as process launches, file changes, network connections, and user activity for security purposes. Effective endpoint monitoring provides the raw evidence needed for detection and investigation.
In plain English: Watching activity on computers and devices to spot suspicious behavior.
Example: "Endpoint monitoring showed the malicious script spawned from a document reader minutes before the login anomalies."