Antivirus software is designed to detect and remove malware; malware is the broad term used to describe all kinds of malicious or unwanted code. Antivirus solutions are installed on individual devices such as desktops, laptops, and smartphones, as well as on servers. They run in the background and periodically scan device directories and files for malicious patterns indicating the presence of malware. The software taps into its database of virus definitions and signatures to see if there are executable malicious codes within it. It blocks or quarantines files if it comes up with a match. 

Anti-virus software will usually miss Zero-day attacks, Ransomware attacks, and fileless malware attacks, and antivirus software miss around 30 percent of threats. Now, endpoint detection and response (EDR) doesn’t pay attention to specific kinds of virus or malware being used – it looks at the behavior that’s taking place. If the behavior is malicious or indicative of suspicious activity, EDR technology will identify that and send an alert. 

Therefore, EDR systems are superior to antivirus software alone and better equipped at handling cyber threats than traditional antivirus. 

EDR is an approach to detecting malicious network activity and protecting computer networks including servers, desktops, and mobile devices from intrusions and malware attacks. 

EDR solutions are tools which help you in detection and investigation of suspicious activities across all the endpoints of your digital perimeter. EDR solutions work by monitoring network and endpoint events and storing the information on a centralized database for further analysis, investigation, or reporting. Suitable software is installed on the host which helps in data monitoring and reporting on the potential threats.