Microsoft Defender for Endpoint

Formerly Microsoft Defender ATP

Other software that we use is enabled to detect certain things that this is able to detect. So as you can see, you can see a lot of difference between whatever you could see versus whatever other software sees.

I would say, where it's well suited as certainly any device where you know that either you're potentially running a Kickstarter device as your own personal unit, but maybe you want to try to connect it to some resource like, "Hey, you know what? This is a small community device. Maybe I'll try connecting my email on the go." You're protected from that perspective with the vendor, even if it's something that might be a bit suspicious from a hardware perspective. There's also the case where any device that you know are running Defender for endpoint that you're good to go. You don't really have to worry about all the other solutions out there because Defender has recovered.

Well, it's easy to use so even if you have a small IT team, cybersecurity, it's really good and I can't think of anywhere where it wouldn't be appropriate.

What Microsoft does great at the market or business level is that once you buy a subscription to E three and E five, you already have a certain number of endpoints to be covered by this technology. And since it's very easy to deploy because you only need to turn on certain capabilities, the ease of deployment is just amazing right now. When it comes to protection, that's where things need to improve.

It helps with identifying malicious files embedded in emails, so that's all good. So that's where it's not sealed. I can't pinpoint any on top of my head.

Well, I just say that, so you are a Microsoft shop, there is no reason not to install it. You should definitely have it.

If you have an enterprise with endpoints with Microsoft, this is the platform to go. If you have an environment with Lane, it is more difficult to have Defender for Endpoint.

It's very cost effective. It helped us recover some funds elsewhere.

Microsoft Defender for Endpoint is well suited for detecting malicious files from a EDR prospective. It is light weight and does not impact other processes or applications running on systems. Microsoft Defender for Endpoint is at time difficult to troubleshoot. It would be nice to be able to flip a switch to disable Defender for Endpoint when troubleshooting issues.

It says it's cloud-based. There are lags, so it works well because we have a distributed workforce now working primarily from home, so it's easy to get in there and make those changes. If we were on site and we wanted faster validation of the changes, it would be missing that because it can't do it fast enough and get those quicker turnarounds.

I think it's well-suited office-wide overall, I don't know where it would be not as appropriate.

It's well suited if you're a Microsoft shop, it puts everything into the same ecosystem, whether it's defender for endpoint, for cloud, for identity, they all work together. Where it's maybe less suited: well as maybe if you're more of a Google shop, more Linux desktops or Apple desktops, those sort of things. And it does work with Linux and Apple, but not quite as well.

It deals with all the paths from one user to end user through secure platform and encrypted data packets for confidence of company and clients. It also works with the documents, chats and even in meetings correspondence.

Usually we had lots two platforms tasked with scanning exposures, anti-malware and provision for information and threat management. But with Microsoft Defender for Endpoint we have an all inclusive platform that even integrate with other Microsoft security apps such as Microsoft Defender for Cloud for enhanced threat insights and visibility.

Microsoft Defender for Endpoint is a great platform for visibility into your network, allowing you to see what your devices see. It is a great platform for Endpoint Detection and Response. It falls short at being a traditional antivirus/antimalware platform, as it is difficult to do any whitelisting and exclusions on your own.

Defender is easy to implement a base level across an organization, but can be difficult to completely tune and manage. It is well-worth the effort and makes a great overall solution.

It is also very good and easy to setup for home users. Plus, it is free for home users using Microsoft operating systems.

Small and Mid Size organizations and organizations who are pro Microsoft users.

Microsoft Defender for Endpoint will be super useful to you if you have a Microsoft security ecosystem in your organization because of the flawless and hassle-free integration capabilities.
Microsoft Defender for Endpoint will be a great choice when you are a big organization (more than 500 endpoints) and are dealing with customer data from a critical industry.
Although if you lie in the SMB segment, taking standalone Microsoft Defender for Endpoint plans will make you confused about which features to go for and which ones to let go off. Hence, explore other options here.

It is good as it comes with the M365 suites, which in a way can be a great bargain point as you pay several products with one pricing and we all know that Antivirus is not cheap. It can improve the security definition to detect better threats out there, as the internet is sometimes a scary place and the dashboard can be improved for administrator function.
For MS Windows environment, the protection and collaboration with Windows firewall is expected and can be and additional compliment to each other

Based on my experience Microsoft Defender for Endpoint is well suited for the following scenarios:

• Companies having Microsoft Windows based setup
• Having in house and remote devices which should be protected
• Compliance requirements to centrally manage devices
• Centrally monitor devices
• Centrally receive security alerts for issues and attacks on devices

Its suitability depends on an organization's specific needs and requirements. For enterprise environments with a large number of endpoints, including PCs, laptops, and servers, Microsoft Defender for Endpoint is a good fit. Its scalability and centralized management make it an excellent option for businesses with intricate infrastructures. We have deploy for organization with 800 users.

Microsoft Defender for Endpoint is well suited in any organisation that require a secured workstations. It provides a secured environment with all the features like Attack Surface reduction, URL blocking, Files scanning for Malware. Compared to other products, MDE is cheaper and easy to manage. Being used as a antivirus solution on some devices allow us to lower our Antivirus cost.

Defender for Endpoint is an excellent choice for companies that work with a Microsoft-based platform. The endpoint does not need to be specific Windows-based, but it is very helpful when Entra is used in combination with other Defender products. That way, you can aim for a multi-layered approach based on zero trust. Sentinel is not essential but a great addition to the platform for incident management and offering longer retention. Small companies should look at ways to outsource the investigation of incidents to specialized companies; the learning curve for proper analysis is pretty steep.

It's ideal for protecting a variety of endpoints, including Windows-based PCs, servers, and mobile devices.
It's well-suited for organizations with a mix of on-premises and cloud resources.
Azure AD integration allows for seamless identity management in hybrid environments. While it supports hybrid environments, organizations with extremely complex on-premises setups may find it challenging to integrate.