Foundation glossary/Operations
EDR
Companion card for the Foundation course — study the related lesson for full progress.
Simple explanation
Security camera + guard on each laptop/server.
Technical explanation
Endpoint detection and response telemetry.
Real-life scenario
Company laptop agent that can freeze a PC if ransomware starts.
Security relevance
Endpoints are where ransomware and living-off-the-land run — EDR sees it.
Practical example
Odd PowerShell → isolate host.
Telemetry
Detect
Respond / isolate
Mini quiz
Isolating a laptop after odd PowerShell is typical:
Related lesson
No direct lesson slug yet — use the Foundation course syllabus or roadmap level system-security.