Microsoft Defender for Office 365

In our company of ~2500 users, we use Microsoft Defender for Office 365 on a daily basis, or rather, every minute of the working day. This ranges from monitoring Microsoft Defender for Office 365 for Identity sensors and alerts, to managing blocked/allowed senders, removing email threats that got delivered to users, isolating high-risk devices, releasing emails from quarantine, and much more. Microsoft Defender for Office 365 also gives us insights of vulnerable software within our environment on servers and normal workstations, missing KB' for various CVE's, Alerts for suspicious activity or applications, as well as recommendations and possible solutions for other vulnerabilities found within our network. It integrates nicely with the rest of our domain applications, and we have automated sentinel alerts which triggers for various types of events that one needs to monitor. We have recently implemented MDI which is part of the offerings, and found it to be very useful in terms of monitoring logs and events, and sending alerts to the list of people specified in order for action to be taken. Features that are also very important include Company Secure Score, and exposure score, which provides you with detailed stats and analysis to see trends and do reporting on using PowerBI.