description Microsoft Defender XDR Overview
Microsoft Defender XDR is an extended detection and response platform that correlates security signals across endpoints, identities, email, collaboration tools, and cloud applications. It brings alerts and incidents from products including Microsoft Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps into a unified investigation environment. Security teams use it for threat detection, hunting, response, and remediation.
help Microsoft Defender XDR FAQ
Which Microsoft security products feed incidents into Defender XDR?
Defender XDR correlates signals from products including Microsoft Defender for Endpoint, Defender for Office 365, Defender for Identity, and Defender for Cloud Apps. It groups related alerts into incidents so analysts can investigate an attack across devices, accounts, email, and cloud services.
What is the difference between Microsoft Defender XDR and Microsoft Sentinel?
Defender XDR is an XDR platform centered on Microsoft's security products and their connected attack data. Microsoft Sentinel is a broader cloud-native SIEM and automation platform that can ingest logs from Microsoft products and many third-party sources.
Can Defender XDR automatically contain a compromised device or account?
It supports automated investigation and response actions such as isolating a device, stopping malicious files, and addressing compromised identities when the relevant products and policies are configured. Administrators can choose levels of automation rather than allowing every action without review.
Where do analysts investigate Defender XDR incidents?
Microsoft provides the unified Microsoft Defender portal at security.microsoft.com. The portal includes the incident queue, advanced hunting, threat analytics, device information, and response actions.
explore Explore More
Similar to Microsoft Defender XDR
See all arrow_forward
Reviews & Comments
Write a Review
Be the first to review
Share your thoughts with the community and help others make better decisions.
