Does XDR Mark the Spot? 6 Questions to Ask
Extended detection and response technology goes well beyond endpoint management to provide visibility into networks, servers, cloud, and applications. Could it be the answer to your security challenges?
What Is the Difference Between XDR and SIEM?
Security information and event management (SIEM) tech can offer XDR-like capabilities with the right analytics and response automation, ESG's Oltsik says. Given the crossover, it's understandable why many SIEM vendors are pitching XDR solutions. But, of course, there are distinctions.
"I'd say the two key functions promised by XDR are superior analytics and automated response," Oltsik explains. "This will really be driven by a cloud-native architecture and XDR vendors being highly active in analytics development. XDR vendors have a clean slate and a better toolset, including cloud resources and machine-learning algorithms, to address security at scale. SIEM could do the same but has to do so while still carrying a lot of legacy baggage."
(Image: profit_image via Adobe Stock)
Joan Goodchild is a veteran journalist, editor, and writer who has been covering security for more than a decade. She has written for several publications and previously served as editor-in-chief for CSO Online. View Full Bio
3 of 7

More Insights