Item: Microsoft Defender XDR
Rating: 8
Author: Harshit Lal

Overall Satisfaction with Microsoft Defender XDR

Use Cases and Deployment Scope

in our organization it is used for endpoint protection, mail protection, protection for cloud sase apps

Pros and Cons

Pros

compliance
visibility
threat hunting

Cons

pricing
support and ticketing system
false postive cases

Return on Investment

roi on Microsoft Defender XDR is reported higher than microsoft siem
Microsoft Defender XDR roi is increased as detection rate is higher in this solution
deployment method is not so complex hence no negative impact on roi

Before implementing this solution, deployment method was very complex and detection rate for overall threat and alerts very less. we do not had any automation response system to close predefined alerts and incidents

Microsoft Defender XDR has overall increased detection rate and also provided autmated response system

Automated Response

experience of automated response in Microsoft Defender XDR is helping to explore on more advanced malware side as static malware cases are detected and resolved automatically. with automation response we can remediate threats more proactively and it is more user friendly.

SIEM Connection/Configuration

we are sending logs from Microsoft Defender XDR to microsoft sentinel through connector and it is a seamlesss process.

we are planning in future to onboard unified soc platform

Alternatives Considered

Proofpoint Advanced Threat Protection

Microsoft Defender XDR deployment process is seamless as compared to proofpoint

Key Insights

Do you think Microsoft Defender XDR delivers good value for the price?

Yes

Are you happy with Microsoft Defender XDR's feature set?

Yes

Did Microsoft Defender XDR live up to sales and marketing promises?

Did implementation of Microsoft Defender XDR go as expected?

Yes

Would you buy Microsoft Defender XDR again?

Yes

Other Software Used

Proofpoint Advanced Threat Protection, Palo Alto Networks Cortex XDR, CrowdStrike Falcon

Likelihood to Recommend

It provides antivirus protection for endpoints. It helps in creating various dashboard which helps in proper traffic visibility and analysis to client. it helps in investigation of threats and eliminates malware from cloud based apps. it helps in providing automated response for predefined incidents and alerts.

Comments

Please log in to join the conversation

Microsoft Defender XDR review