EDR
acronymsecurityIT support
Endpoint Detection and Response: the agent that records what endpoints do - processes, connections, changes - detects the malicious, and can isolate the host.
Antivirus asked 'is this file bad?'; EDR asks 'is this behavior bad?' and keeps the tape.