Network detection & response (NDR) is a new category of security solutions that complement and go beyond the capabilities of log analysis tools (SIEM) and endpoint detection & response (EDR) products. NDR is an excellent first step toward a more proactive security posture as it yields immediate benefits and is generally easier to deploy and configure than SIEM and EDR.
NDR products monitor east-west traffic, or communications within the network itself, and apply advanced behavioral analytics like cloud-scale machine learning in order to rapidly detect, investigate, and respond to threats that would otherwise remain hidden. This is true whether the environment is on-premises, in the cloud, or a hybrid environment spanning both on-premises and cloud.