Forum Discussion
Windows Defender antivirus and Defender for Endpoint next-gen antivirus
Hello, Windows 10 includes Windows Defender antivirus, and there is also Microsoft Defender antivirus included in Defender for Endpoint package. As I understand Defender for Endpoint antivirus ...
SteBeSec still not clear for me. I perfectly understand that MDE adds additional features besides tradional antivirus.
But this link (https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-antivirus-in-windows-10?view=o365-worldwide) states that MDE includes "Next-generation protection".
I have read further and understood, that MDE includes PUA (potentially unwanted application) detection. As well as it includes BAFS (Block at first sight) feature. And also there is dynamic emergency updates feature (https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/cloud-protection-microsoft-defender-antivirus?view=o365-worldwide#get-cloud-delivered-protection).
Are these available without MDE?
I have been struggling with this question lately myself, i.e., do you actually get something more out of Microsoft Defender Antivirus through MDE that you do not get when you simply manage Microsoft Defender AV with Intune on a Windows 10 machine. Is there a difference between Microsoft Defender Antivirus and Next Generation Protection? Microsoft needs to be a lot more clear about this. I have the same question about a lot of the Attack Surface Reduction technologies. They are mostly all built into Windows 10 and can be managed with Intune. So what does MDE give me really? It makes MDE Plan 1 a hard sell. The only benefit I can see is that they feed into the M365 Defender portal so you can see alerts.