From the course: Managed Detection and Response (MDR) Advanced Strategies

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

Microsoft Defender for Endpoint in EDR

Microsoft Defender for Endpoint in EDR

From the course: Managed Detection and Response (MDR) Advanced Strategies

Start my 1-month free trial Buy for my team

Microsoft Defender for Endpoint in EDR

“

- [Instructor] As you can see, Microsoft Sentinel and also the Microsoft Defender capabilities work hand in hand to help us with incident response of all types. Now, of course, what's important here is to understand that Defender also supports endpoint detection and response as well. So to walk through this process, we will once again, come here to the Microsoft 365 Defender site, and I'm going to click into incidents on the left hand side. Now, we've been here before. We know this lists all of the specific incidents that have been created over the course of the past X number of days or months that we've selected. But what we're going to do here is simply just click the first one. We're not going to focus on breaking down anything, just straight into an incident. And I want to ignore everything else on this page except the investigations option. Now, when we go into the investigations option, what this does is this…

Contents