Item: Microsoft Defender for Endpoint
Rating: 9
Author: Verified User

Use Cases and Deployment Scope

MS Defender is used as endpoint security solution. Pretty useful in protecting endpoints from malware & other threats like credential dump activity, bloodhound/sharphound-related activity. MS support is good in responding on request raised related to threat detection. Major challenges faced is for whitelisting FP detection using file path. Also reports are not much available for reporting requirement.

Pros and Cons

Helps in Endpoint Management through centralized console.
Good detection Coverage.

Reports
Whitelisting options.

Return on Investment

Good threat detection coverage.
Centralized management console is good.

Key Differentiators

Scalability
Integration with Other Systems
Ease of Use

Mostly it runs smoothly on host without impacting performance as other AVs like Symantec's impacts performance issue of host. Also because it's still a good product overall price range. Can upgrade to EDR solution with not much difficulty & onboarding on tool is not that complicated. The detection capability of the product is up to the mark.

Components

Microsoft Defender Antivirus - Used for Endpoint protection.

Protection Scope

Yes - Windows host mostly.. more than 10000+ host.

Alternatives Considered

Trend Micro Apex One and Symantec Endpoint Security

Mostly it runs smoothly on host without impacting performance as other AVs like Symantec's impacts performance issue of host. Also because it's still a good product overall price range. Can upgrade to EDR solution with not much difficulty & onboarding on tool is not that complicated. Detection capability of product is upto mark.

Key Insights

Do you think Microsoft Defender for Endpoint delivers good value for the price?

Yes

Are you happy with Microsoft Defender for Endpoint's feature set?

Yes

Did Microsoft Defender for Endpoint live up to sales and marketing promises?

Yes

Did implementation of Microsoft Defender for Endpoint go as expected?

Yes

Would you buy Microsoft Defender for Endpoint again?

Yes

Other Software Used

Proofpoint Email Protection, CrowdStrike Falcon, Exabeam Fusion

Likelihood to Recommend

As said earlier MS Defender is pretty useful in protecting endpoints from malware & other threats like credential dump activity, and bloodhound/sharp-hound-related activity. The centralized console helps in checking the defender status of endpoints. It needs improvement in the customization of reports as per organization requirements. It lacks alerting when MS Defender is uninstalled in some scenarios which needs to be addressed.

Nice Product.

Overall Satisfaction with Microsoft Defender for Endpoint