Microsoft Defender for Endpoint

Microsoft Defender for Endpoints stands out as a comprehensive mobile threats protection solution. I appreciate its intuitive and user-friendly interface, which makes navigating and responding to threats incredibly efficient for my team and me. It provides real-time detection of mobile threats such as phishing attempts, malicious apps and unsafe WIFI networks, ensuring all the mobile devices used in the production floor remain secure. The centralized dashboard makes it easy to monitor mobile and traditional endpoints in one place, providing a clear view of potential risks. Its automated remediation actions help isolate or block compromised devices quickly thus minimizing disruptions. Microsoft Defender for Endpoints integration with Microsoft Intune enhances mobile device management, allowing for policy enforcement, compliance checks and data protection on both our corporate and BYOD devices. Finally, the platform support indepth incident correlation and root cause analysis for mobile-related alerts, which help improve threat response and long-term resilience

- The software usually acts better if you are browsing on the internet and suddenly interact with a suspicious website. - It monitors downloads on your browser and sometimes it really protects you from viruses. - It provides high-security against Ducky Scripts or any other remotely functional automated scripts by removing or suspending them. - It is completely free from Microsoft and doesn't require you to pay additional subscriptions.

The ease of deployment and the breadth of coverage provided. Microsoft Defender for Endpoint goes beyond a simple EDR by expanding into CASB, SIEM, email training and phishing, DLP, and much more. If you are an E5 customer, this is included in the plan at no additional cost.

Microsoft Defender for Endpoints occasionally generates false positives that flags legitimate mobile apps as threats. This requires manual reviews which slows down response time. Additionally, it is somewhat limited when it comes to mobile devices that aren't Microsoft based, which makes it complex to enroll new BYODs

- This software often removes some important DLL files that are required to run the applications. - You cannot permanently disable it, the service will be restarted at some point or after restarting the computer. - Sometimes it allows an actual virus to run in the background constantly.

Microsoft is combining its security suites into one view under Microsoft Defender for Endpoint. I agree with this strategy but find that some of the settings get lost in sub-menus or tabs. A redesign of the menus or a universal search function would be beneficial for administrators. Also, as an E5 customer; it is frustrating to see new features being added outside of the core Defender for Endpoint license. For example, the vulnerability view shows vulnerable software installed on machines, but if you want to see browser extensions you need to upgrade your tier. Microsoft should consider including everything under one license.