A security system that monitors and collects activity data from endpoints to find indications of threats, then analyzes those data for threat patterns, automatically responds to remove or contain threats, and notifies security teams. Compare network detection and response (NDR).