I have gone to forensic courses and trained enough on the Windows registry to understand computer systems, but even with that information I often have to investigate what’s going on in my network based on my direct knowledge of my systems. My weakness is often that I don’t have the informational resources that a large enterprise has. I’m just as mandated to report breaches both by the industry I’m in and the state I do business in. It’s sometimes easier for a small firm to make dramatic shifts to more secure solutions, whereas a large enterprise has legacy programs and software in place and can’t make the migration as easily. It showcases how much more I need to know to understand what’s going on in my network.Īlthough I don’t handle the security of a large enterprise, I’ve been exposed enough to the threats and risks to large enterprises to understand that the difference between large firms and small firms are often just quantity, scale and budget. I know that Microsoft Defender for Business provides more protection to my firm, but it also shows how much I don’t understand about my vendors and how they code. That often depends on how well you know your network. Larger businesses can choose Defender for Endpoint and then opt for P1 or P2 licensing depending on your needs.Īs with any threat detection tool, quick assessment of alerts is important.

Defender for Business is designed for businesses under 300 users. If you are looking for a means to better investigate security issues in your firm this may be a solution you want to review and consider. You can onboard workstations using a script, Intune or Group Policy. At $3 per user per month, it takes the place of your traditional antivirus solution that you may have deployed in your office. Defender for Business makes it easier to deploy EDR in a reasonable fashion and in an affordable package. Endpoint detection and response (EDR) is typically not something that smaller firms have.

Windows defender review