Defender Review from SOC employee
September 20, 2023
Defender Review from SOC employee

Score 10 out of 10
Vetted Review
Verified User
Overall Satisfaction with Microsoft Defender XDR
All in one solution for security in an enterprise. Solves multiple security problems for Endpoint, Identity, O365, Cloud and etc.
Pros
- Easy to use UI
- Great documentation
- Constantly improving experience
- Great detection rules
Cons
- Better playbooks
- Better detection rules
- Easier tuning options
- Detections that were missed by other EDR tools
- Filled missing loopholes in security infrastructure
Staying up to date with intelligence, alerts, and detections. Defender does most of this for you.
You don't need that many different tools for various security objectives. Defender is a one to go tool for most of the investigations.
Yes, in general it's pretty good. Takes some work off SOC employees. I still don't trust it enough so we manually review automated response tickets, but so far only good experience.
We use Splunk it had Defender app. Easy to use and set up.
Both of these tools fill up each other gaps, sometimes one catches what other does not (from EDR perspective).
Do you think Microsoft Defender XDR delivers good value for the price?
Not sure
Are you happy with Microsoft Defender XDR's feature set?
Yes
Did Microsoft Defender XDR live up to sales and marketing promises?
I wasn't involved with the selection/purchase process
Did implementation of Microsoft Defender XDR go as expected?
Yes
Would you buy Microsoft Defender XDR again?
Yes

Comments
Please log in to join the conversation