


Defender for Endpoint generates alerts when it identifies attacker tools, techniques, and procedures. It provides actionable alerts and enables you to respond quickly.

It's amplified by the power of the Intelligent Security Graph with signals across Windows, Azure, and Office to detect unknown threats. Defender for Endpoint quickly adapts to changing threats.

This module also brings the software inventory features described in Access a software inventory and can be automatically enabled for supported machines with the auto deploy settings.Īnalytics-based, cloud-powered, post-breach detection. Learn more in Investigate weaknesses with Microsoft Defender Vulnerability Management. With Microsoft Defender for Endpoint installed, Defender for Cloud can show vulnerabilities discovered by Defender Vulnerability Management and also offer this module as a supported vulnerability assessment solution. Vulnerability assessment from Microsoft Defender Vulnerability Management. Defenders for Endpoint's sensors collect a vast array of behavioral signals from your machines. Microsoft Defender for Endpoint protects your Windows and Linux machines whether they're hosted in Azure, hybrid clouds (on-premises), or multicloud environments.Īdvanced post-breach detection sensors. To view Defender for Endpoint alerts in Defender for Cloud: Security reader, Reader, Resource Group Contributor, Resource Group Owner, Security admin, Subscription owner, or Subscription Contributorīenefits of integrating Microsoft Defender for Endpoint with Defender for Cloud To enable/disable the integration: Security admin or Owner Requires Microsoft Defender for Servers Plan 1 or Plan 2Īzure Arc-enabled machines running Windows/LinuxĪzure VMs running Linux ( supported versions)Īzure VMs running Windows Server 2022, 2019, 2016, 2012 R2, 2008 R2 SP1, Windows 10/11 Enterprise multi-session (formerly Enterprise for Virtual Desktops)Īzure VMs running Windows 10 or Windows 11 (except if running Windows 10/11 Enterprise multi-session) You can learn about Defender for Cloud's integration with Microsoft Defender for Endpoint by watching this video from the Defender for Cloud in the Field video series: Defender for Servers integration with Microsoft Defender for Endpointįor more information about migrating servers from Defender for Endpoint to Defender for Cloud, see the Microsoft Defender for Endpoint to Microsoft Defender for Cloud Migration Guide. Automatic investigation and remediation.Behavioral based and cloud-powered protection.Risk-based vulnerability management and assessment.Microsoft Defender for Endpoint is a holistic, cloud-delivered, endpoint security solution. With Microsoft Defender for Servers, you gain access to and can deploy Microsoft Defender for Endpoint to your server resources.
