XDR
XDR is extended detection and response: detection and response that spans endpoints plus other sources such as identity, email and cloud, in one product. Because it holds the detections, an XDR can trigger response without a separate SIEM, which shortens the path to containment.
Definition
The label varies. Some vendors use XDR for an EDR with extra sources, others for a full platform. Read what sources it takes and what actions it can run.
An XDR's response is often limited to its own products. Check whether it can act on a third-party firewall or identity provider.
XDR in CrowdStrike Falcon Fusion's documentation
CrowdStrike's Falcon Fusion page footnote says a 70 percent efficiency improvement from workflow automation is an aggregate assessment of Falcon Insight XDR customers, with no sample size or period given. vendor claim crowdstrike.com, read
The example names a vendor and its own page. A vendor's use of XDR may differ from the definition above; the rubric uses the definition on this page.