Threat detection and response refer to the set of capabilities, processes and technologies that monitor indicators of compromise or malicious activity, analyze them for severity and context, and enable timely mitigation or containment.