Microsoft Defender for Office 365 Reviews

My current use cases for Microsoft Defender for Office 365 are email security, device security, and identity security. Those are the main three ways we use it.

The anti-spoofing technology has helped protect our executives. 

My primary use cases for Microsoft Defender for Office 365 in my company revolve around endpoint security. 

Microsoft 365 in general helps with security needs, and I could receive notifications about potential threats.

It's easy for people who use the Microsoft environment.

I use Microsoft Defender for Office 365 for various compliance tasks. For example, I can use it for eDiscovery to search mailbox content. Just today, a manager requested all emails for a departing user who no longer had an active license. Using Defender's content search feature, I exported the user's entire mailbox as a PST file for the manager to import into Outlook. Beyond eDiscovery, Defender also helps us monitor compliance and security scores, manage quarantine emails, investigate phishing alerts, and configure data classification, labeling, anti-spam, and anti-malware policies.

Before using Microsoft Defender for Office 365, we were plagued by phishing and ransomware emails, especially for our board members. To combat this, we implemented a Defender policy that triggers alerts for emails containing keywords like "bank account" or "credit card details." Additionally, a policy tip and disclaimer appear in user mailboxes for such emails. This disclaimer clarifies the email's external origin and allows users to move it directly to junk with a single click. Simultaneously, an alert goes to the administrator, who investigates the email: if legitimate, it's released, otherwise it's blocked.

Our organization operates a single, hybrid tenant environment with a mix of on-premises and cloud-based mailboxes, with the majority residing in the cloud. This small, non-multi-tenant setup supports approximately 2,000 users.

While Microsoft Defender for Office 365 integrates with third-party solutions, our organization prioritizes Microsoft technologies for security. We only integrate external tools with explicit management approval. This focus extends to data backup. Even though Office 365 is a cloud service, we recently purchased Barracuda, a tool that seamlessly integrates with Office 365 for data backup.

Prior to my arrival, our organization lacked a dedicated Office 365/Microsoft 365 security specialist, with IT admins relying on web searches for configuration. Upon identifying vulnerabilities, I implemented Microsoft Defender and other security measures. Our compliance score, which was around 30 percent a year and a half ago, now consistently ranges from 75 to 85 percent, thanks in large part to Microsoft Defender for Office 365.

Microsoft Defender for Office 365 helps prevent advanced attacks like business email compromise by stopping lateral movement within the network. It also includes data loss prevention features, where our custom policies have helped block malicious emails, ransomware, and spam before they ever reach our servers. While not perfect, Microsoft Defender has significantly improved our email security, offering around 80 to 90 percent effectiveness, which we're quite happy with.

Microsoft Defender for Office 365 has significantly improved our security team's efficiency. The comprehensive security analytics dashboard provides insightful information on threats, including the number of phishing attempts and attacks on our servers. This data can be easily exported for clear reporting to management. Overall, Microsoft Defender for Office 365 saves us time and simplifies security analysis presentations.

We use many Microsoft Security products, and overall, it's helping us with our overall security posture. Though we see some challenges, we want to see if the Security Copilot can help, but overall, it's very helpful and essential to our operations.

Microsoft Defender for Office 365 helps prioritize threats across our enterprise. The security products provide good visibility, allowing us to see and prioritize various events, which is crucial given the daily volume of events. We can see what's going on and prioritize. Because there are many different events, we can focus on the most important ones first. This prioritization of threats is very important. Otherwise, it may not be usable because we will be handling thousands of events every day.

The threat intelligence offered by Microsoft Defender for Office 365 helps us prepare for potential threats before they hit. It offers visibility and a focused response needed to manage threats promptly. The security features can effectively and quickly identify and prioritize threats, contributing to rapid threat response.

Our application is a SaaS solution, so we have many customers, and the cloud infrastructure is essential to our business. The security features of Microsoft Defender for Office 365 can quickly identify and prioritize threats, allowing our SecOps team to act quickly to respond to the threats.

Microsoft Defender for Office 365 has saved us time and money. It has decreased our time to detection or time to respond by approximately 10 times because we have 100 gigabytes of logs every day, and without automation, it would be impossible for humans to handle.

This will be a potential risk because if there's any security incident, that will cause reputational and financial damage. Being able to maintain our overall security posture with Microsoft Defender for Office 365 is invaluable.

The DLP feature of Microsoft Defender for Office 365 is pretty good. The DLP feature of Microsoft Defender for Office 365 is valuable, and we also use the DLP feature for email real-time detection. The value of the DLP feature is significant to us because we have internal data, sometimes sensitive, and the users may not always be aware of security and privacy, which might lead them to send out information mistakenly to external parties.

We mainly use Microsoft Defender for Office 365 for people who teach or work remotely. This allows us to effectively control and monitor them.

We have faculty who aren't even near the college. Some of our faculty are in other cities and teach remotely. Microsoft Defender for Office 365 enables us to manage everything through the cloud, so we don't have to ship anything back and forth. We can do updates or address any issues with computers remotely.

As a specialist in SOC, we work closely with multiple customers to cover their IT assets using Microsoft 365 Defender. They have Microsoft Defender for Endpoint deployment, especially for Microsoft 365. We configure the tool to implement the different policies and requirements to cover the email security part and the cloud apps part with the different strategies available on the platform.

After that, we either work directly on the Microsoft 365 portal or configure the sending of the alerts from this portal to Microsoft Sentinel. This will act as a single pane of glass for us to follow the incidents and advise our customers based on that.

One of the best features of the tool is its capability to aggregate insights from different workloads, basically from the Office 365 and endpoints part. With the integration of Microsoft Defender for Identity and Microsoft Entra ID Protection, we will have insights from the identity part. Finally, with the Microsoft Defender for Cloud Apps, we'll also have insights about our cloud apps, either Microsoft 365 cloud apps or third-party cloud apps.

The aggregation of all of these insights into the tool's incident feature will help us have a global vision of the incidents and find multistage attacks at the first steps of the attacks.

We use Microsoft Defender for Office 365 to protect our Outlook 365 inboxes. When opening links in emails, Defender's URL defense verifies the legitimacy of the URL, ensuring it's not a spam link. This protection is active whenever clicking on any link within Outlook 365.

Our organization's security has been strengthened with Microsoft Defender for Office 365. Regardless of the specific tools we use for our daily office tasks, our data remains protected.

It provides great visibility into vulnerabilities compared to its competitors. Its insights and timely identification of Common Vulnerabilities and Exposures enable proactive threat mitigation, making it the preferred choice for comprehensive security.

Microsoft Defender for Office 365 is critical for our organization's security and privacy because it helps prioritize enterprise-wide threats and protects our sensitive data. Data breaches pose a significant financial risk, potentially costing millions or even billions of dollars, making Defender's role in safeguarding our data vital.

It automates routine tasks and prioritizes high-value alerts, providing automated insights to our security team. This allows us to proactively block harmful activities like anonymous calls and intrusions, significantly enhancing our overall security automation.

Microsoft Defender for Office 365 provides threat intelligence, enabling proactive threat mitigation. It monitors all network traffic, both incoming and outgoing, allowing us to track data and protect our network perimeter. This comprehensive monitoring includes network calls, enhancing our overall system security.

Microsoft Defender for Office 365 has helped to save us time and money and has reduced our time to detect and respond.

We utilize Microsoft Defender for Office 365 to enhance our email protection.

All of our Office 365 solutions are stored in the cloud. We have recently acquired multiple licenses for Microsoft Defender for Office 365.

We also use DMS. I believe that integration comes out of the box because both products are from Microsoft and I haven't taken any steps to do any integration myself.

The comprehensiveness of DMS and Microsoft Defender for Office 365 has been incredibly helpful, particularly concerning email attachments. They have successfully identified numerous suspicious attachments, some of which were reported. The integration of these two solutions has proven to be extremely beneficial. Additionally, they have been effective in detecting phishing links and untrusted sites in emails on several occasions.

I remember what actually prompted us to switch to using Microsoft Defender for Office 365. We had several people who were not tech-oriented receiving loads of phishing emails, and their credentials were almost compromised. It wasn't just them; we had many other users in the organization facing similar issues. To address this, we conducted a phishing simulation, and unfortunately, a lot of people failed the simulation. After analyzing the situation, we realized the need to provide better training and implement additional security measures in case someone made a mistake or failed to follow proper procedures. That's why we decided to go with Microsoft Defender for Office 365. So far, it has been effective in identifying a lot of threats. Previously, we received several complaints about compromised credentials, mainly due to phishing emails. However, since we started using Microsoft Defender for Office 365, the number of complaints has drastically reduced. Although some people still fail our phishing simulation during in-house tests, externally, Microsoft Defender for Office 365 has proven valuable in filtering out numerous threats. I'm confident that without it, many accounts would have been compromised.

Microsoft Defender eliminates the need for multiple dashboards. When I'm on the Office 365 dashboard, I don't see any reason why I would need to access another dashboard.

Microsoft Defender for Office 365 identifies various threats and notifies us whenever it detects something suspicious. Without Microsoft Defender for Office 365, it would be quite time-consuming. We used to receive numerous complaints about credential tests, but since its deployment, those complaints have drastically reduced. Microsoft Defender for Office 365 has saved me a considerable amount of time.

It indirectly helps our organization reduce costs. We encountered a situation where one of our financial officers had their credentials stolen, and someone attempted to impersonate them, trying to transfer funds to other accounts. However, the system flagged the suspicious activity, and we were able to prevent the unauthorized transfer.

Microsoft Defender for Office 365 improves our ability to detect and respond to threats. It easily identifies all potential threats and promptly notifies us. I can only imagine the consequences if it weren't in place. Numerous suspicious links and attachments might have gone through, resulting in additional work and time spent on finding ways to remediate, resolve, and contain the situation.