Microsoft Defender for Endpoint Review
May 17, 2024
Microsoft Defender for Endpoint Review
Score 10 out of 10
Vetted Review
Verified User
Overall Satisfaction with Microsoft Defender for Endpoint
Currently we use the EDR product together with Entra ID and we also use it as a third-party EDR product. And normally what happens is we use Defender as an audit tool and login tool. So whenever there is an incident raised in any means by security products, which can be Defender or another product, we use the extended capabilities of auditing and logging of Defender to drill down and see what the user has to face and identify what the problem is. Then we contact the user and we try to help them.
- It is very good in detecting what has happened on the endpoint. So tracking all the actions, what the user clicked, if there was a malicious program that touched the mailbox, anything like that is excellent.
- While it's a very good product for auditing, it has a very hard time to distinguish what is malicious and is an attack, what is not. Very rarely we get indication of a real malicious attack. We got lots of hours for off the shelf malware that it cleans up automatically. So basically we never get to look at it, which is a positive thing, but threats are detected by the third party endpoint, so it will not be enough by itself.
- It's only positive you have it and you just have to install it.
- Other
The fact that it's basically included with our licenses. We have it already and it was seamless to install. It didn't impact us. The fact that it worked in all the operating systems. It was easy to install within Intune and deploy it. It's all positive.
We have 600 endpoints, but we also have several Windows servers.
We evaluated several other reports XDR, CrowdStrike, Sentinel One and Cybereason. And at the end on now we purchase the Cybereason mostly for a matter of cost because it's cheaper and we are a relatively small company.
Do you think Microsoft Defender for Endpoint delivers good value for the price?
Yes
Are you happy with Microsoft Defender for Endpoint's feature set?
Yes
Did Microsoft Defender for Endpoint live up to sales and marketing promises?
Yes
Did implementation of Microsoft Defender for Endpoint go as expected?
Yes
Would you buy Microsoft Defender for Endpoint again?
Yes