What is the difference between EDR and Antivirus?

Question

Accepted Answer

EDR is a proactive approach to threat detection and response, while antivirus is a reactive approach to threat prevention.

EDR focuses on detecting and responding to threats in real-time, while antivirus focuses on preventing known threats from infecting a system.
EDR uses behavioral analysis and machine learning to identify suspicious activity, while antivirus relies on signature-based detection.
EDR provides more detailed information about the nature of a threat and its impact on the system, while antivirus typically only provides a notification that a threat has been detected.
EDR is often used in conjunction with antivirus to provide a more comprehensive security solution.
Examples of EDR solutions include Carbon Black, CrowdStrike, and SentinelOne, while examples of antivirus solutions include McAfee, Norton, and Kaspersky.

Accepted Answer

EDR focuses on detecting and responding to threats in real-time, while antivirus focuses on preventing known threats from infecting a system.

EDR uses behavioral analysis and machine learning to identify suspicious activity, while antivirus relies on signature-based detection.

EDR provides more detailed information about the nature of a threat and its impact on the system, while antivirus typically only provides a notification that a threat has been detected.

EDR is often used in conjunction with antivirus to provide a more comprehensive security solution.

Examples of EDR solutions include Carbon Black, CrowdStrike, and SentinelOne, while examples of antivirus solutions include McAfee, Norton, and Kaspersky.

What is the difference between EDR and Antivirus?

Top Cumulus Systems Information Security Analyst interview questions & answers

Popular interview questions of Information Security Analyst

Top HR questions asked in Cumulus Systems Information Security Analyst