Making Sense of a Confusing Detection and Response Solutions Landscape
summary
Research shows XDR means different things to different organizations: 55% say XDR is an EDR extension, 28% expect a single-vendor detection-and-response suite, 16% want a heterogeneous architecture. Key findings: telemetry is fragmented across EDR, NDR, CDR and identity, 56% of respondents see NDR as an XDR foundation, and many teams (surveyed customers) report 75% had zero identity detections. Advice: expect a mix of turnkey XDR playbooks plus specialized SOAR work, plus lots of managed (MDR) help.
AI-written summary · about
chapters (8)
- 0:00Introduction and speakers
- 1:45Threat detection challenges
- 7:29What is XDR?
- 12:53Centralization vs specialization
- 16:49StarDR model explained
- 21:27Detection technologies overview
- 30:28Managed detection and response
- 33:00Q&A session
related talks
40mHow to Build a Long-term XDR Architecture Strategy
47mOpen XDR: A Strategy for Evolving Security Needs
40mBeyond Endpoints: A Case for Open XDR
40mThe Skeptic's Guide to Using XDR to Get Zero Trust
40mMDR: Making Sense of the Veg-o-Matic Buzzword Blender
19mDefender XDR in the Real World: Measurable Risk Reduction
27mThe Offensive Approach to Cybersecurity
46mExtend EDR Visibility by Logging Everything: Demo with Free Integrations