Microsoft Defender for Endpoint

Microsoft Defender for Endpoint (MDE) is the enterprise endpoint security platform providing prevention (next-gen AV, ASR), detection and response (EDR), threat & vulnerability management (Defender Vulnerability Management), and automated investigation and remediation (AIR). It feeds the endpoint pillar of Defender XDR.

When to use

Protecting Windows, macOS, Linux, iOS, and Android endpoints. This is the right skill for onboarding decisions, policy design, ASR rollout, EDR tuning, and response action scoping.

Do not use this skill for cross-workload investigation (defender-xdr), Azure resource hardening (defender-for-cloud-hardening), or identity-side detection (defender-for-identity).

Pick the plan and the onboarding path