Cybersecurity terminology

  • EDR (Endpoint Detection and Response): Record and analyze everything that happens in a device.
  • XDR (Extended Detection and Response): Record and analyze everything that happens in a multitude of sources.
  • SIEM (Security Information and Event Management): Collect, aggregate, analyze logs and create alerts.
  • SOC (Security Operations Center): A Security Operations (SecOps) team monitors, analyzes and responds to incidents.
  • MDR (Managed Detection and Response): Outsourced SOC
  • SOAR (Security Orchestration, Automation, and Response): Automation for incident response.