Simple definition
A detection platform that correlates signals from multiple safety layers.
Technical definition
wide-track and janitorial telemetry brings together the dataset, identity, email, network or cloud to build a more complete view of an attack.
What is it used for ?
Detect complex scenarios that would be difficult to do with a single source.
Practical example
One XDR can link an email of phishing, an execution PowerShell and an unusual cloud connection.
Common issues
- Incomplete integrations
- Alert volume
- Dependence on an ecosystem editor
Related terms
Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.