Trends Report

Adapt Or Die: XDR Is On A Collision Course With SIEM And SOAR

EDR Is Dead, Long Live XDR

April 28th, 2021
Allie Mellen, Principal Analyst
Allie Mellen Principal Analyst
With contributors:
Joseph Blankenship , Jeff Pollard , Andras Cser , Steve Turner , Alexis Tatro , Peggy Dostie

Summary

Extended detection and response (XDR) is the evolution of endpoint detection and response (EDR), providing optimized threat detection and response that spans security and business tools. In contrast to legacy SIEM approaches and current security analytics platforms, XDR is grounded in EDR, unifying it with other security tooling to give security analysts visibility, high-efficacy detection, and more-effective correlation, investigation, and response. XDR aims to enable security pros to build and maintain competence in their detection and response program with a new approach. This report defines XDR; highlights the distinctions between XDR, security analytics platforms, SIEM, and SOAR; showcases XDR from the operator’s perspective; and gives actionable recommendations for evaluating and implementing an XDR solution.

Want to read the full report?

Contact us to become a client

This report is available for individual purchase ($1495).

Forrester helps business and technology leaders use customer obsession to accelerate growth. That means empowering you to put the customer at the center of everything you do: your leadership strategy, and operations. Becoming a customer-obsessed organization requires change — it requires being bold. We give business and technology leaders the confidence to put bold into action, shaping and guiding how to navigate today's unprecedented change in order to succeed.