Microsoft Defender for Endpoint Microsoft Defender for Endpoint is an enterprise endpoint security platform designed to help enterprise networks prevent, detect, investigate, and respond to advanced threats. Defender for Endpoint uses the following combination of technology built into Windows 10 and Microsoft's robust cloud service: • Endpoint behavioral sensors: Embedded in Windows 10, these sensors collect and process behavioral signals from the operating system and send this sensor data to your private, isolated, cloud instance of Microsoft Defender for Endpoint. • Cloud security analytics: Leveraging big-data, device-learning, and unique Microsoft optics across the Windows ecosystem, enterprise cloud products (such as Office 365), and online assets, behavioral signals are translated into insights, detections, and recommended responses to advanced threats. • Threat intelligence: Generated by Microsoft hunters, security teams, and augmented by threat intelligence provided by partners, threat intelligence enables Defender for Endpoint to identify attacker tools, techniques, and procedures, and generate alerts when they are observed in collected sensor data. Key Features The solution leverages a wide range of techniques including behavioral, simulation, script analysis, memory scanning, network monitoring signatures and heuristics on the client to detect newer malware. Designed to provide a big advantage in reducing complexity and time to deploy, it offers a wide range of features:  Multi-layer security: Multi-layered prevention, detection and mitigation (built into the endpoint) from file-based malware, malicious scripts, memory-based attacks, and other advanced threats  Real-time Threat Analytics: SecOps visibility is enriched by contextual, real-time reports radically improving the threat impact perception.  Enhanced Threat and Vulnerability Management: Advanced prioritisation incorporating the business context as well as the dynamics of the threat landscape, providing content while real-time threat discoverability and built-in remediation process speed up vulnerability mitigation.  Built-in, elevated protection: Cutting-edge detection and protection capabilities offer real time security against broad scale and targeted attacks and at an enterprise scale.  Behavioral detections: Effective endpoint detection and response requires use of various data analytics techniques in order to provide contextual information, connect a chain of seemingly benign events and uncover suspicious behavior.  Rapid threat containment: Advance defense capabilities utilizing automated threat resolution enables swift threat containment while minimizing the business risk exposure.  Security Automation: Leverage AI-powered automation to remediate threats in minutes, speeding up the security processes by transforming alerts, to investigation and threat activity, even to determine the appropriate course of actions.  Easy deployment through an array of option