History of the Term EDR

Today I asked myself, When did the term EDR come out? It seemed to just come out of left field.

What is EDR?

EDR = Endpoint Detection & Response: “This name reflects the endpoint (as opposed to the network), threats (as opposed to just malware and officially declared incidents), and tools’ primary usage for both detection and incident response.” Source: http://blogs.gartner.com/anton-chuvakin/2013/07/26/named-endpoint-threat-detection-response/

ETDR (Endpoint Threat Detection & Response) was coined in July 2013 by Anton Chuvakin of Gartner[.com]. In 2015, he and Gartner began referring to it as EDR.

Since then, based on the most advanced statistical analysis tool and dataset known to man (Google :-)), the term has exploded in use…

• 2015: 87,000
• 2016: 124,000
• 2017: 1,080,000 (as of 01 Oct 2017)

And, there you have it.