Microsoft Defender for Endpoint

[...] is a manufacturing company headquartered in Montreal. We have offices across Canada and the United States. Microsoft Defender for Endpoint is deployed across our entire organization. Having a cloud based solution with a single pane of glass to manage all our assets is of the highest importance to us. Being able to receive immediate alerts when suspicious activity occurs has been extremely helpful in keeping our risks at a minimum. Microsoft Defender for Endpoint management is also smart enough to not send several alerts when an attack could be hitting multiple targets within a certain time frame or it's the same attack multiple times.

• Microsoft Defender for Endpoint has alerted our team when users clicked on phishing links in emails and we were able to prevent any harm
• When a website frequently visited was compromised, Microsoft Defender for Endpoint quickly quarantined the file that was auto-downloaded.
• The alerts for the website download were all consolidated to one incident making it easier to manage.

We have Microsoft Defender for Endpoint installed across our entire organization with offices in Canada and the United States. All our workstations are Microsoft Windows based. Our servers are all Microsoft Windows Server and we have a few on-premise servers at our headquarters as well as several hosted on Microsoft Azure.

BlackBerry Protect (CylancePROTECT) and BlackBerry Optics (CylanceOPTICS)

Sage 300, WatchGuard AuthPoint

We use the Microsoft Defender for Endpoint protection and threat response. It helps protect our organization's servers and cloud from any attacks, thus keeping our data secure. The tool helps to ensure that our endpoints are secure from any threat through threat detection and elimination automation.

• Improved security posture.
• Saves time.

We use Microsoft Defender for Endpoint as our EDR solution. We used to have a traditional AV. So the transition from the AV to the EDR was a tremendous improvement from our soft team. So we are definitely happy with it. And the scope of the use cases, the entire endpoint, plus the older software system as well.

• Another positive impact is that Microsoft Defender for Endpoint is built into the Windows OS. So naturally, it is much easier to load it out and manage it, rather than acquiring it through party ER, deploying it, and managing it separately. So that's definitely on the positive side that we observe there's a byproduct of changing Microsoft Defender for Endpoint.

The problem it's solving for is obviously protecting us from ransomware, malware, and any viruses on our systems. Also, any data loss prevention controls what we put into the policy so users aren't accidentally deleting a lot of data or sending the data where they're not supposed to go. It also protects the endpoint from various types of risks and threats. The scope is in production. It's on everybody's machines. And we just want to make sure that we're minimizing as many risks on our endpoints. So we make sure that the computers are up to date, it's protected.

• For me, the positive was the return on investment: it's, again, part of the technology stack. It comes with the E5 license. So it's not a separate contract I have to do, separate licensing that I have to monitor. It's all built within what we do with our regular users and what other Microsoft tooling they use.

ChatGPT, Microsoft Security Copilot

We implemented Microsoft Defender for Endpoints as a replacement for two other antivirus products. MS Defender provides a great interface to track down individual user issues, email threats, and provides each user a great tool to conduct scans on removable media. The additional benefit of MS Defender is that we are no longer flipping between different products for audits and security.

• Decreased operating costs allowing us to use only one AV solution
• Reduced time looking for issues during a troubleshooting call
• Provides auditing tools for compliance

We are protecting over 400 endpoints to include Windows laptops, servers, and Azure Virtual Devices. We are pushing the mobile device management as users begin adding Intune onto their personal devices allowing us to push Defender and further isolate company data from personal data on multiple device platforms to include Android and iOS.

Microsoft Sentinel and Cisco Secure Endpoint

Microsoft Sentinel, NinjaOne, WinZip