What is antivirus/EDR?

Antivirus/EDR (Endpoint Detection and Response) is security software designed to detect, prevent, and respond to malicious activity on endpoint devices like computers and servers. Antivirus focuses on preventing known threats through signature-based detection, while EDR provides more advanced capabilities like behavioral analysis, threat hunting, and incident response to address both known and unknown threats. EDR often includes features like endpoint isolation and automated remediation.