Microsoft's platform for antivirus and endpoint detection and response, which Defender for Servers integrates with.
Also called MDE, Defender ATP.
Read more: Microsoft Learn
In the Ultra Transcenders books
SC-500SC-900SC-200SC-300SC-401MD-102
Each book explains Microsoft Defender for Endpoint in context, with comparison tables and the common traps.
Terms in this definition
- EDR
Defender for Endpoint's endpoint detection and response, which uses behaviour to detect and react to post-breach activity and continues even when Defender Antivirus is passive.
- Microsoft Defender for Servers
Covers Arc-enabled servers and Azure VMs in Defender for Cloud. Plan 1 brings integration with Defender for Endpoint; Plan 2 goes further with agentless scanning, file integrity monitoring and alerts from Defender for DNS.
Related terms
- Next-generation protection
The antivirus layer of Microsoft Defender for Endpoint, delivered by Microsoft Defender Antivirus. It blocks malware using real-time scanning, behavioural analysis and cloud-based intelligence.