Microsoft Defender XDR
Unified threat detection, investigation, and response across identities, endpoints, email, cloud apps, and workloads — powered by AI‑driven insights and automation.
-
Microsoft Defender for Endpoint – Onboarding with Intune Part 4
Introduction If your Windows devices are already managed by Microsoft Intune, an Endpoint detection and response policy is the cleanest way to onboard them to Microsoft Defender for Endpoint. There are no scripts to copy around, no onboarding packages to refresh, and every new device that lands in the target group is onboarded automatically. In…
-
Microsoft Defender for Endpoint – Permission Model Part 3
Microsoft Defender for Endpoint – Permission Model (Part 3) About this part In the previous section, we reviewed the basic configuration options for Microsoft Defender for Endpoint. In this section, we will examine permission management approaches, demonstrating how administrators and Security Operations Center team members can access the Microsoft Defender for Endpoint service. Introduction Access…
-
Microsoft Defender for Endpoint – Defender for Endpoint configuration Part2
Microsoft Defender for Endpoint – Defender for Endpoint configuration Part2 About this Part In Part 2, we will cover the following topics related to Microsoft Defender for Endpoint: Prerequisites The following prerequisites must be met: Note: When creating a new Microsoft Defender tenant, each component (Defender for Endpoint, Defender for Identity, Defender for Office 365,…
-
Microsoft Defender for Endpoint – An Overview of Architecture, Capabilities, and the Ecosystem Part1
Microsoft Defender for Endpoint (MDE) – architektúra, képességek és ökoszisztéma áttekintés Microsoft Defender for Endpoint (MDE) – An Overview of Architecture, Capabilities, and the Ecosystem Microsoft Defender for Endpoint is a comprehensive endpoint security platform designed to prevent, detect, investigate, and automatically respond to threats in modern environments. It is not a single product, but…
-
Microsoft Defender XDR Deep Dive – Advanced Hunting and the Telemetry Architecture – Part2
Microsoft Defender XDR Deep Dive – Advanced Hunting és a telemetry architektúra Microsoft Defender XDR Deep Dive – Advanced Hunting and the Telemetry Architecture – Part2 In the previous section, we looked at how Microsoft Defender XDR works at a high level and how it can correlate endpoint, identity, email, and cloud telemetry around a…
-
Microsoft Defender XDR Deep Dive – Part1
Microsoft Defender XDR Deep-To-Dive Microsoft Defender XDR Deep Dive – Part1 Microsoft Defender XDR is an integrated security platform that processes telemetry from different areas of an enterprise environment—endpoints, identity management, email traffic, SaaS applications, and cloud resources—in a unified way. Its goal is to interpret isolated events as coherent attack patterns and, based on…
-
Password Protection in Microsoft Defender – Reducing Identity Risk at the Source
Most cyberattacks don’t start with some sophisticated exploit. They start with something much simpler: a password. And in many cases, it’s not even hidden—it’s something users have been reusing for years. Not even a clever one either. Usually just a weak, reused, or slightly modified password that’s easy to guess. Even after years of enforcing…