Network Detection and Response
NDR tools analyze network traffic, often using behavioral analytics, to detect threats moving across the wire. They catch things endpoint agents cannot see, such as attacks on unmanaged devices or lateral movement between systems. SOC teams use NDR alongside EDR to cover both the endpoint and network views of an intrusion.