Microsoft Defender for Business
A relatively cheap (depending on your pricing plan) extended solution
Go beyond traditional antivirus with enterprise-grade protection and vulnerability management for your Windows, macOS, iOS, and Android™ devices.
Microsoft Defender for Business | Microsoft Security
Learn about Microsoft Defender for Business, an endpoint security solution built to help protect small businesses against cybersecurity threats.
Microsoft Defender for Business is not an XDR (Extended Detection and Response) solution. It is designed as an endpoint security solution for small and medium-sized businesses, providing protection against cyber threats like malware and ransomware
Advantages
- Unified management console - requires some knowledge
- Vulnerability management - software and operating system. Will help you harden up your operating system and software
- Security Scoring system - rates your security level against peers
- Alerting system for vulnerabilities and breaches
- Device Isolation and recovery
- Live response - limited remote administration function
- Microsoft provides diagnostic tools in bat or PowerShell
Disadvantages
- Not fool proof - group policy is still recommended in addition
- Base configuration requires some tweaking requiring product knowledge
- Entry level product so limited functionality
- ASR can be painful if endpoint is a gaming system - mods sideload constantly
- Does not replace a good NGFW
- Requires Windows Professional and above - home version not supported
- Can take up to 24 hrs for security portal to update information on changes
Relatively easy to setup but requires product and operating system knowledge. Highly recommend for sole traders, small businesses, and individuals looking to enhance their defenses.
One tool in my arsenal, and second only to my NGFW.
#enoughsaid