NDR (Network Detection and Response)
NDR tools analyze raw network packets and flow data to identify malicious activity that endpoint-level tools may miss, such as lateral movement, C2 communications, and data exfiltration. NDR provides SOC teams with visibility into east-west traffic inside the network, which is critical for detecting attackers who have already bypassed perimeter defenses.
Want to help your analysts focus on the most critical alerts?
Other definitions
