Item: Microsoft Defender XDR
Rating: 8
Author: Alfiya Mukadam

Overall Satisfaction with Microsoft Defender XDR

Use Cases and Deployment Scope

I was in the middleware team at Builder.ai where sensitive data used to flow from the front end to the middleware and then used to go to the cloud like salesforce, netsuite, zoho,etc. This platform is used to apply a defense mechanism on all possible endpoints through which our data flows. This is really helpful in addressing in data leakage and other possible harmful issues

Pros and Cons

Pros

Protection of endpoints
Imposing security defense mechanism
Securing emails
Authorised access of information

Cons

The IoT support can be extended
Pricing for some paid features like cyberthreat detection, etc can be decreased
The installation process can be improvised
Customer support has to be more engaging

Return on Investment

Improved security
Endpoints data leaks are reduced
IoT devices are securely used
Network is protected
Positive customer impact

Challenges Being Addressed

The implementation itself is tedious, it requires expert handling for installation and later some days, say a month or so. Later some training is also required for software professionals like us to use it in our implementation of the middleware data flow. So it is difficult initially and later smoothens

For us, we have secured endpoints and devices, we do not have to worry much for customer data, payment information flowing to and from the front end to middleware and then the cloud platform. The customer engagement has improved a lot

Automated Response

I used it in the past year while I was employed at Builder.ai. Initially I was trained on it, how to use it in our implementation of software. I have done some testing as well related to data leaks at API endpoints and I found it helpful and a great tool to work with

SIEM Connection/Configuration

Yes, connected to Microsoft Sentinel to analyse the data collected and check for suspicious activities or data leaks or some kind of breach. So it is a bit difficult at the start, an expert help is required to do so. Later stage you can learn the integration and do it on your own

This the internal team would decide

Alternatives Considered

CrowdStrike Falcon

Key Insights

Do you think Microsoft Defender XDR delivers good value for the price?

Yes

Are you happy with Microsoft Defender XDR's feature set?

Yes

Did Microsoft Defender XDR live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Microsoft Defender XDR go as expected?

Yes

Would you buy Microsoft Defender XDR again?

Yes

Likelihood to Recommend

Since I have been working in an organisation where data used to flow from frontend to middleware and then to cloud platforms like salesforce, netsuite, zoho. Securing the application, their end points, the other hardwares we integrate on network was a must. Hence we came up with XDR, which provisions a secure stack for our data endpoints.
this platform is for those where security is a priority and breach of any-form is not acceptable.
not suitable for small scale organisations as it is costly

Comments

Please log in to join the conversation

Protect API endpoints, devices and data with Microsoft Defender XDR