As threats such as cyberattacks become more complex these days, there is a need for security measures that assume that threats will invade.
EDR is a representative example of a solution, but EDR alone poses several challenges.

• Inability to respond to threats that do not go through endpoints such as networks, servers, and clouds.
• Even when threats are detected by EDR, it is necessary to collate multiple pieces of information (logs/alerts) for an overall understanding.
• Many alerts are generated, and it is difficult to judge whether the detection is correct or not.

XDR is the solution to solve these problems.
XDR centrally aggregates multiple pieces of information (logs/alerts), analyzes and visualizes them, and mechanically automates subsequent responses, thereby contributing to improved detection capabilities while reducing operational burden.

In this seminar, we will introduce XDR using next-generation SIEM Exabeam from the overview of XDR, which has been attracting attention in recent years.