Microsoft Defender XDR Reviews

We use Microsoft 365 Defender to help secure threats of the Office package, such as Word, Excel, and PowerPoint. Additionally, it can fix issues.

Microsoft 365 Defender is simple to upgrade.

The user interface of Microsoft 365 Defender could improve. They could make it simpler.

I have been using Microsoft 365 Defender for approximately one year.

Microsoft 365 Defender has been a stable solution.

We have approximately 1,000 people using this solution in my organization. If we expand then we will increase usage.

The support for Microsoft 365 Defender is good.

The installation of Microsoft 365 Defender was automatic when we did the installation of Microsoft Windows.

My internal IT team does the supporting of the solution.

I would recommend this solution to others.

I rate Microsoft 365 Defender a nine out of ten.

We are using it for incidents and alerts. It is helpful for threat hunting.

We have tied it to Azure AD or Microsoft Entra, and we are trying to implement it for Linux.

It saves the investigation time. There is a lot of information about the threats and other things.

Advanced hunting is good. I like that. We can drill down to lots of details.

It is user-friendly. It has a lot of parts. For me, it was pretty quick to get a sense of it.

It protects from phishing emails, but sometimes, some of the emails are not detected. They are getting delivered into the inbox, not in a junk folder or spam folder. Users are reporting them as phishing emails.

At times, when we have an incident email and we click on the link for that incident, it opens a pop-up, but there is nothing. It has happened a couple of times. 

In terms of additional features, it is too early for me. I am still learning all the parts. I am just scratching the surface of the tool. One year is not enough to get every detail of it.

I have been using Microsoft Defender XDR for about a year.

It is stable, but sometimes, we experience an issue. Clicking the link in an incident email opens a small window, but we cannot find anything there. This has happened a couple of times. There is a bug.

Other than that, we have not experienced any downtime or any big issues. It is pretty stable.

We have plans to maximize its usage. We are trying to see how to get the most out of it, but my older colleagues would know more about it. I am still learning it.

I have not contacted them.

I am not sure. I am relatively new. I have only been working here for a year. They already had it in place.

I have not worked on a similar tool before. This is my first XDR tool.

It is on the cloud. I am not aware of its deployment because it was already deployed before I joined.

I cannot recommend it because this is the only tool for XDR that I have used. I have not used any other tool, but it is a good tool.

I would rate Microsoft Defender XDR a nine out of ten.

We rely on Microsoft 365 Defender for workstation detection across a number of categories, including virus detection, potential unknown application detection, and monitoring for suspicious website interactions, including clicks and access attempts.

I have used Microsoft 365 Defender in the cloud.

We have experienced significant advantages from implementing Microsoft 365 Defender, as it provides enhanced visibility into workstations and the ability to automatically remediate threats. This means that not every incident requires manual intervention, as certain tasks can be handled automatically, often in conjunction with Microsoft Sentinel.

We are able to ingest collected data from our entire ecosystem. This is an important feature.

We are able to prioritize threats accounts our whole environment.

The solution has helped automate routine tasks and help automate high-value alerts.

The threat intelligence has helped prepare us for potential threats before they hit and we took proactive steps. We are able to check our workstations are well.

We have saved some time by using the solution.

I have found that having solutions from multiple vendors is more helpful than from one.

The most valuable features of Microsoft 365 Defender are the combination of all the capabilities and centralized management.

The support could be more knowledgable to improve their offering.

I have been using Microsoft 365 Defender for approximately one and a half years.

The solution is stable.

We have a few thousand people using this solution in my organization.

The scalability of Microsoft 365 Defender is scalable.

I have used the support and they do not know how to fix the issues. Their knowledge could improve.

I rate the support from Microsoft 365 Defender a seven out of ten.

Neutral

We have used Microsoft Sentinel. Microsoft Sentinel enables us to investigate threats and respond holistically quickly from one place.

The comprehensive features of Sentinel Security Protection are impressive, particularly its integrated SOIR and UEBA functionalities, as well as its robust threat intelligence capabilities.

I have used McAfee previously and Microsoft 365 Defender is much better.

I rate Microsoft 365 Defender a ten out of ten.

We primarily use the solution for security. We removed all other antivirus products such as McAfee. We removed everything and now use Defender as Defender covers everything all third-party products used to cover.

Overall, we are satisfied with the product.

Instead of using three or four tools for security, we can use one. With one product, Defender, we have all of the features we need. We can use Defender to block and monitor for security purposes without needing multiple other products to do different tasks. 

It's very user-friendly.

The dashboards could be improved. They have to improve something about the dashboard. It is good, however, they need to provide some more information under each account.

The logs could be better.

I've been using the solution for two years. 

The solution is a perfectly stable product.

The scalability of the product is good.

Technical support from Microsoft is good. We haven't had any issues with them. We are quite satisfied so far. 

We previously used McAfee, however, we wanted to have just one solution, Defender, to cover everything.

The solution's initial setup is not complex yet not easy. We had to use some scripts and policies and a lot of things. If you set up a new environment with Defender, you have to integrate with the old policy and the same policy that was already set up. It needs time.

I handled everything without any consultation from any outside sources. 

I don't know the cost. The costs are handled by management. I can't say if the cost is expensive or not. I don't handle that aspect.

We're Microsoft partners. 

I'd rate the solution at a ten out of ten. It's a pretty perfect product.

Microsoft 365 Defender  offers emerging endpoint security technologies, such as EDR and XDR and Zero trust approach

I have been using Microsoft 365 Defender for approximately two years.

Microsoft 365 Defender is a stable solution.

I am satisfied with the technical support.

The solution is included in Windows 10.

Microsoft is not competitive with the pricing of the solution. The competitors are able to offer lower discounts. The price of the solution is higher.

Microsoft 365 Defender is Microsofts first try at a security package as part of Windows.

They are offering different services with Zero Trust security, SIAM security, SOAR security with Azure. They converge all products in the same security center. Microsoft 365 Defender is one strong point to the overall security protection.

I rate Microsoft 365 Defender a five out of ten.

We have very strong DLP policies. The product will inspect each and every outgoing email and what kind of attachments they have, including if any have business-sensitive information such as outgoing email going to some public domain such as Gmail or Yahoo. If the solution detects this, it'll raise an alarm and notify the required teams. On top of that, the incoming email will scan attachments for any potential malware tech or any phishing link. 

The native capabilities are quite good as it slips in seamlessly as part of our integration. 

It integrates well without AD, Active Directory.

It gives a lot of flexibility in terms of configuration and customization as per the business requirements.

These days, in the security industry, there is a buzzword called zero trust. I personally have not seen much evidence of how Defender can enhance the story of Zero Trust for enterprises. Microsoft needs to offer more features here or spread awareness in the industry and the market about how Defender addresses Zero Trust issues.  

I've used the solution for more than a year now.

The stability is good. it's up to the mark. 

It's usually scalable. 

We're using it on a daily basis. 

The solution works for any size of organization. There is no such limitation for Microsoft as the ecosystem they have built doesn't really have a limiting factor. It will work for a small sized up to a big-sized organization. Our company is half a million strong. If it satisfies our needs, then definitely it can satisfy anybody else as well.

I personally have never reached out to technical support as our in-house expertise is good enough.

It's good for the most part, as it is their own homegrown product and they understand it well.

We haven't worked with any other products.

The setup is a simple process, however, users can adopt the phase-in approach and start simple and then yeah. For example, over a period of time, you can achieve what you want to achieve, but not in a single shot. You can do it in phases and work everything in slowly.

The amount of time it will take to deploy Defender depends, actually. If a customer is already sure about all the processes and reporting information they require, then to start, it should not take more than a couple of months, including planning.

There is some maintenance required. We need a team to run the show, however, when you compare it to other options, the maintenance requirements are reduced. We typically have a cloud operations team to oversee it, and it's business as usual. Our company is able to provide any needed maintenance services to our clients. 

Our company integrates this solution into our client's infrastructure.

We have E3 and E5 licenses for our users and there is the default.

Depending on the user role, the senior people and critical positions have been allocated the E5 licenses and the intermediate users have been allocated E3 licenses.

Whether it is inexpensive or not is not a very straightforward question as, when you compare the total cost, you have to consider the total cost of ownership. It's not only a comparison between two products. You have to see the other dependencies when you deploy any other solution. That said, I would say it is more or less cost-effective.

We are partners with Microsoft.

I'm in a customer-facing role where we propose different email security solutions to our customers. My role demands that I identify the required security solutions for the different needs of our customers.

We are on the latest version of the product.

I'd advise potential new users to define their business requirements first, however, it's likely Defender will need them and provide what they need.

I'd rate the solution at a nine out of ten.

I use the solution for security against system threats.

I have found the ability to delete unwanted threats beneficial.

The solution could improve by having better machine learning and AI. Additionally, the interface, documentation, and integration could be better.

I have used this solution for approximately one year.

The solution is stable.

Microsoft 365 Defender is scalable.

The price of the solution is high compared to others and we have lost some customers because of it.

I rate Microsoft 365 Defender a seven out of ten.

The primary use case for Defender is to control the endpoint systems at the user level. On the networking level, we use it to analyze spam and see if any antivirus services are required or if there's a ransomware attack. As of now, I am just using it for monitoring.

I like that it's stable. It's been stable for a long time, and Microsoft Defender has done a good job there. I can see a lot of changes to Microsoft 365 Defender when I compare what we have now to what we had from 2007 to 2010. They have implemented a ransomware feature, and if any virus comes into the system, it triggers an alert.

The price could be better. It'll also help if they can continuously update and upgrade the solution. Every day there's a new virus uploaded into the network, and we have to keep updating it to identify all these things.

I have been using Microsoft 365 Defender since 2007.

Microsoft Defender is very stable, and you can see that there is a 99.9% success rate when they give us good service. It's very helpful for configuring anything.

It's definitely easy to scale. However, scalability depends on the plan and requirements.

They have their norms and regulations that they use once a ticket is created. Whatever the technical issues are, they normally resolve them within the timeline or some days. They are good at the technical side of things.

The initial setup is totally easy. It's not complex. It takes just a couple of minutes to deploy this solution.

The price could be better. Normally, the costs depend on the country you're located in for the license. When we were in the initial stage, we went with the E5 license they call premium standard. It cost us around $5.20 per month for four users.

I would recommend Microsoft Defender to new users. I would advise them to understand their exact requirements and check if it matches before taking it up.

On a scale from one to ten, I would give Microsoft 365 Defender a seven.