Defender

Microsoft Defender is Microsoft's family of threat-protection products, unified under Microsoft Defender XDR. The main components are Defender for Office 365 (safer links and attachments, anti-phishing), Defender for Endpoint (EDR for Windows, macOS, Linux, iOS, and Android), Defender for Identity (detection of identity-based attacks against AD and Entra ID), and Defender for Cloud Apps (CASB for SaaS apps). Signals from each component feed a unified incident view at security.microsoft.com. Some Defender capabilities are included in Microsoft 365 E5 and Business Premium; others are sold as standalone add-ons or part of the broader Microsoft Sentinel/Defender stack.