Endpoint Detection Response (EDR) Software

What is EDR? 

Endpoint Detection Response (EDR) software is a security solution that monitors end user devices (endpoints) for possible security threats like ransomware and malware. EDR is a more proactive approach to address advanced security threats versus antivirus solutions which typically only address known threats. 

OIT recommends the following solutions for CU Boulder faculty, staff, student staff, and students all of which meet the standard for Secure Computing. All programs below are free of charge and have been added to the VPN host checker system.

Please Note: If your University-owned computer is a Secure Computing device, you will automatically have Defender for Endpoint on your machine and do not need to install any additional packages. Not sure if you're enrolled in Secure Computing? Check your device for Self Service Software.

Benefits of EDR

Microsoft Defender for Endpoint is a comprehensive, cloud-native endpoint security solution that delivers visibility and AI-powered cyberthreat protection to help stop cyberattacks at CU Boulder. Defender for Endpoint provides central reporting to the Office of Information Security in order to mitigate and investigate the scope and depth of cyber-attacks, ransomware and malware. 

This allows the campus to collectively identify malware for faster response and remediation. Faster response to individuals impacted by malware improves the safety of our network by addressing the issue faster and before it spreads.

Cost

The EDR solutions linked to from this site are provided for workstations at no cost to you or your department but university owned servers may incur additional costs for licensing.

Who can get it

CU Boulder faculty, staff and students.

How to get it

Select the link in the table above that corresponds to your device, or visit the EDR Help page to find download and installation instructions.