Microsoft Defender for Endpoint

What differentiates Microsoft Defender for Endpoint from other similar products?

Cloud base admin console

What is your favorite aspect of this product?

everything is configurable from the cloud console

What do you dislike most about this product?

was hard to to transfert configuration from previous software to this one

What recommendations would you give to someone considering this product?

go for it!

What differentiates Microsoft Defender for Endpoint from other similar products?

It runs natively on Windows it’s not a bolted-on solution. Once you’ve got the proper license it is simple enough to light up the application to safeguard the endpoint. Integrated with Microsoft Intune. It’s designed to find and remediate adversary techniques from the MITRE knowledge base. Machine-controlled detection and remediation of threats with a graphical timeline view of how the threat got into the device and was stopped. It has its vulnerability scanner to feed information into the dashboard thus you’ll be able to see daily that endpoints got to be patched 1st based on their price.

What is your favorite aspect of this product?

One of the simple strengths of Windows Defender is that it’s free. It already comes packaged with Windows. You don’t get to install it individually or pay further for the excellent quiet protection it provides. Unlike all the opposite anti-virus computer code out there, the service is extremely lightweight on the system and one doesn’t even get to understand once a background check goes on within the background. I ne’er had to open the appliance to run scans. It mechanically keeps running in the background and informs if something fishy is going on in the background.

What do you dislike most about this product?

It is not a complex antivirus resolution once it involves its feature sets. People who are finicky regarding every feature are a bit discomfited with the shortage of options/settings available to assemble the antivirus.

What recommendations would you give to someone considering this product?

It would be suited in an environment wherever almost all of your endpoints are Windows-based computers, as Windows Defender is already built into the operating system, thus there’s no client to possess to worry regarding installing. It conjointly can create the management of endpoints easier on the server-side, if most all machines are Windows-based.

What differentiates Microsoft Defender for Endpoint from other similar products?

Microsoft Defender is a powerful threat-prevention software package. It detects trojans, malware, and virus-infected files mechanically and quarantines them. It provides info on the device’s performance and health. It additionally keeps a record of the family’s devices connected. Microsoft Defender antivirus software is an extremely effective threat protection solution. The level of integration with Microsoft Windows creates this such a strong product, and, one amongst the best to deploy! The extent of integration with Microsoft Sentinel, and also the Microsoft 365 platform, make this a seamless capability.

What is your favorite aspect of this product?

Microsoft Defender for the endpoint (MDE) includes EDR and Ab in one solution, which improves threat detection for human-operated attacks additionally as insider threats. To hide all techniques of the MITRE ATT&CK framework, MDE integrates anomaly-based detection, deterministic countermeasures, and automatic reaction during a single trendy interface. MDE may be put in on Windows, macOS, Linux, and iOS and Android mobile devices, letting robust security and observance across all devices be managed by one solution.

What do you dislike most about this product?

Microsoft might improve this in my opinion, to create MDE additional capable to deploy at an important scale, at a larger pace. In terms of integration, Microsoft still has some limitations that it’s within the method of addressing.

What recommendations would you give to someone considering this product?

Microsoft Defender for endpoint provides strong real-time endpoint monitoring and aims to observe known or suspected malicious activity. This can be potential as a result of its support of the Threat administrative body provided through Microsoft Security Graph, unendingly updated with new intelligence and machine learning. It provides a unified cloud-based security generation system that gives further visibility, corresponding to risk posture, threat, and vulnerability management, suggested security settings, and different features.