liveBook · Manning

Microsoft Defender for Endpoint

As explained in Azure Security

Microsoft Defender for Endpoint is an endpoint security platform that provides endpoint detection and response, antivirus protection, vulnerability management, and related capabilities.

Microsoft Defender for Endpoint (MDE) is an endpoint security platform integrated with Microsoft Defender for Servers, protecting Azure servers through detection, prevention, assessment, and response capabilities. section 7.2.1

Core capabilities include:

  • Endpoint detection and response, next-generation antivirus, attack surface reduction, threat and vulnerability management, automated investigation, and automated remediation. section 7.2.1
  • Continuous scanning of installed applications to identify weaknesses and vulnerabilities. section 7.2.1
  • Integration with Defender for Servers, which includes an MDE license for Azure servers. section 7.2.1

How Azure Security covers it

How deep it goes
Defines major capabilities and their server integration but stops short of configuration or operational procedures.
Examples
Uses Azure servers, installed-application scans, and Defender for Servers plan comparisons as concrete examples.
What it assumes
Assumes familiarity with Azure servers and introduces MDE through its integration with Defender for Servers.
What you can do after
Operate endpoint protection for Azure servers through Microsoft Defender for Servers and its integrated MDE capabilities.
How it connects
Connects endpoint detection and response with antivirus protection, vulnerability management, and Microsoft Defender for Servers.
Cover of Azure Security
liveBookmanning.com
Read Azure Security on liveBook Get the book at manning.com

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.