The role of NDR
Once deployed, an NDR tool becomes a third element within an organisation’s security platform. It complements Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) capabilities.
Together, these elements provide overlapping fields of visibility and give security teams the ability to achieve what is known as ‘defence in depth’ across their entire infrastructure.
A key benefit of NDR is that it can be used as a passive method of monitoring network traffic and identifying malicious activity. This effectively makes it invisible to attackers and allows the security team to monitor their movements without their knowledge.