Microsoft Defender XDR vs Microsoft Purview Audit comparison

"From the perspective of Microsoft 365 XDR, the main benefit is a single, centralized dashboard offering the holistic visibility organizations crave."

"The visibility into threats is also very impressive because Microsoft helps you predict things and provides analytics to help you really improve your security. And all of this technology works across the domain, so it is pretty helpful in terms of threat analytics."

"What I like most about the product is its all-in-one solution. With Microsoft Defender XDR, we get coverage for various aspects like endpoint security, cloud security, and image-related cases, all within a single platform. This eliminates the need for multiple products or technical controls to address incidents. The main benefit became evident immediately after deployment, especially in its ability to analyze files and phishing emails quickly. By submitting suspicious files or emails, we receive quick results on whether they are legitimate, suspicious, or malicious, saving time."

"Based on my experience, I rate Microsoft Defender XDR as nine out of ten."

"The most valuable features are machine learning, AI, and auto-remediation of none malicious alerts."

"Microsoft 365 Defender is a stable solution."

"Advanced hunting is good. I like that. We can drill down to lots of details."

"The timeline feature is excellent. I also like the phishing simulation. We have phishing campaigns to educate employees and warn them about these threats."

"The platform has significantly enhanced our operational insight into the overall Microsoft 365 environment."

"We're easily saving at least one hour per day using this solution."

"The automation response being slow is the main concern; when an incident occurs or if I run a remediation, it takes significant time to complete the remediation."

"The management features could be improved, particularly in terms of better integration with Intune, Microsoft's cloud-based management solution."

"There are a few technical issues with Defender XDR that can be improved. Sometimes, the endpoint devices are not reporting properly to the Defender 365 portal. When you're getting all the information from the Microsoft portal, the devices are sometimes not in sync. We have hundreds of endpoint devices, some needing to be onboarded again."

"Generally, antivirus products provide a central control to manage every device in terms of who is installing it or who is trying to disable it, but Microsoft doesn't have such a control center for the antivirus product it provides."

"From a performance standpoint, improvements could be made."

"The design of the user interface could use some work. Sometimes it's hard to find the exact information you need."

"Microsoft support is not very good. You get stuck in low-level support for way longer than you should, instead of them escalating the issue up the chain."

"The web filtering solution needs to be improved because currently, it is very simple."

"We do have a Denial of Access happening."

"Areas for product improvement include enhancing customization options and integrating more comprehensive compliance features."

"It can be complex to navigate since customers have varying licensing agreements across Microsoft. If they go straightforward with E5 for all users, it's simple, but combinations based on budget constraints can complicate things."

"With the little idea I have about the costs, I can say that XDR tools tend to be a bit expensive. If you are using Microsoft Defender XDR, then you need to go for a subscription-based pricing model."

"I would like to have more security features in the lower licenses because not every customer is able to buy E5 licenses. The bundling isn't always easy for our customers to understand. Compared to other tools, it's a good price."

"It is 15 dollars per server per month. It is worth it, but it can be costly. It depends on the company's size."

"The bundling of software makes it easier to manage our setup, but Microsoft purposefully obfuscates this through marketing ploys to hide costs."

"Microsoft purposely makes its license combinations complex and includes combinations like Microsoft 365 E3 and Microsoft 365 E5, Office 365 E3, Office 365 E5, and Office 365 E1, so you get confused. Microsoft tries to sell you a bundle of a lot of things together."

"The most valuable licensing option is expensive, so pricing could be improved. Licensing options for this solution also need to be consolidated, because they frequently change."

"Defender XDR is included in the E5 license, but it's a bit too expensive."