Endpoint Detection Response (EDR) Software

Endpoint Detection Response (EDR) is one of the most important tools for safe-guarding your computer, vital information, and personal data from the onslaught of malware. Find the solution below that fits your needs and specifications.

Benefits​Cost​Who can get it​How to get it

What is EDR?

Endpoint Detection Response (EDR) software is a security solution that monitors end user devices (endpoints) for possible security threats like ransomware and malware. EDR is a more proactive approach to address advanced security threats compared to antivirus solutions, which typically only address known threats. 

OIT recommends the following solutions for CU Boulder faculty, staff, student staff, and students, all of which meet the standard for Secure Computing.

Device TypeWindows 10 & 11AppleUnix/ Linux
University-owned computersMicrosoft Defender for Endpoint - WindowsMicrosoft Defender for Endpoint - macOSMicrosoft Defender for Endpoint - Linux 
Personally owned computersMalwarebytes (low cost EDR option): Contact BuffTechs Desktop Support for setup assistance.Not Applicable
University-owned serversMicrosoft Defender for Endpoint or CrowdstrikeNot ApplicableCrowdStrike for Unix and Linux Servers 

Please note: If your university-owned computer is a Secure Computing device, you will automatically have Defender for Endpoint on your machine and do not need to install any additional packages. Not sure if you're enrolled in Secure Computing? Check your device for Self Service Software.

Benefits of EDR

Microsoft Defender for Endpoint is a comprehensive, cloud-native endpoint security solution that delivers visibility and AI-powered cyberthreat protection to help stop cyberattacks at CU Boulder. Defender for Endpoint provides central reporting to the Office of Information Security in order to mitigate and investigate the scope and depth of cyber-attacks, ransomware and malware.

This allows the campus to collectively identify malware for faster response and remediation. Faster response to individuals impacted by malware improves the safety of our network by addressing the issue faster and before it spreads.

Cost

The EDR solutions linked to from this site are provided for workstations at no cost to you or your department, but university-owned servers may incur additional costs for licensing.

Who can get it

CU Boulder faculty, staff and students.

How to get it

Select the link in the table above that corresponds to your device, or visit the EDR Help page to find download and installation instructions.