Microsoft Defender for Endpoint

What differentiates Microsoft Defender for Endpoint from other similar products?

Microsoft Defender for Endpoint is a Next Generation Cloud Based Anti-Virus solution. It can detect Advance threats and protect devices from most of the Attacks. It provides good amount of Logs for Threat Hunting and we can use Kusto Query Language for alert and log investigation generated on Microsoft Defender for Endpoint Cloud Console. Microsoft Defender for Endpoint stores the data in the cloud for 180 days which is great function.

What is your favorite aspect of this product?

Microsoft Defender for Endpoint is very easy to use solution, Its hosted in the cloud so no need to setup and manage on premises infrastructure. Microsoft Defender for Endpoint uses Artificial Intelligence and Machine learning to detect behavioral based attacks. It offers the capability of Threat and Vulnerability management so no need to offer to buy separate product for all of these features.

What do you dislike most about this product?

I would say there is nothing which I don't like for Microsoft Defender. End of the day its great Antivirus tool.

What recommendations would you give to someone considering this product?

Microsoft Defender for Endpoint is great tool to protect corporate devices from Known and Unknown Threats as well Advance Persistent Threats. From One console multiple task can be perform like Application Control, Antivirus, Vulnerability Management.

What differentiates Microsoft Defender for Endpoint from other similar products?

Because the same company manufactures it as Microsoft, it can be used without interfering with the operation of the operating system, even if it is installed. There is no problem when it works; it automatically detects malware and spyware and immediately notifies the administrator. We only use Office365 as a license purchase, so if you see other people's postings, it may be different if you use it regularly. Because it works faster than average security software and does not cost money, it reduces costs and does not interfere with business operations.

What is your favorite aspect of this product?

It is a Microsoft original product and is being tested as a product version. Before, Microsoft Defender had the image of being heavy, but there is no such behavior now. We have macOS, iOS, etc., which would be a problem if the machine response is significantly affected, such as development machines, so we would like to gradually expand it as it is also compatible with other OS.

What do you dislike most about this product?

It is problematic for the administrator user interface to change, whether there is a small addition of functions. Since it is not touched often, it is impossible to set it up with external files that come with a terminal replacement, etc.

What recommendations would you give to someone considering this product?

Currently, we are testing it on a PC that is not directly related to work, such as a demo machine. Still, there are no particular problems, so we will expand it depending on how we think about the administrator's load. Side in the previous section. From the user's point of view, there is nothing to worry about, so I would like to continue creating an environment where you can raise security by preventing anti-virus measures and detection with this product. Because it is equipped with an off-the-shelf operating system, it does not need to be installed and can be updated with Windows updates, making it easier to manage.