Microsoft Defender for Endpoint

Behavioral sensors

Utilizes behavioral sensors to collect and process behavioral signals from the operating system, providing visibility into endpoint activities.

Cloud security analytics

Leverages cloud security analytics to analyze data and detect threats using advanced algorithms and machine learning.

Threat intelligence

Incorporates threat intelligence to identify and respond to known threats, leveraging data from global security experts and Microsoft's own threat intelligence.

Integration with Microsoft Sentinel

Integrates with Microsoft Sentinel to provide a comprehensive security strategy, enabling coordinated responses to threats across multiple security technologies.

Endpoint detection and response (EDR)

Provides endpoint detection and response capabilities to detect, investigate, and respond to advanced threats on endpoints.