{"id":8609,"date":"2025-04-22T11:41:33","date_gmt":"2025-04-22T09:41:33","guid":{"rendered":"https:\/\/aboveit.fi\/putting-all-your-cybersecurity-eggs-in-one-basket\/"},"modified":"2025-11-26T16:11:00","modified_gmt":"2025-11-26T14:11:00","slug":"putting-all-your-cybersecurity-eggs-in-one-basket","status":"publish","type":"post","link":"https:\/\/aboveit.fi\/en\/putting-all-your-cybersecurity-eggs-in-one-basket\/","title":{"rendered":"Putting all your cybersecurity eggs in one basket?"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Following the theme of the recently passed and egg-filled Easter, Above IT’s new ‘consigliere’ Matias Haapaniemi<\/a> has blogged about Microsoft’s Defender endpoint protection and its history as a cybersecurity technology. Microsoft’s paid endpoint protection has a long and interesting history, which often remains unknown due to the product’s repeated rebranding. So, if you’re still wondering whether it’s worth putting all your IT environment’s cybersecurity eggs in one basket within Microsoft’s ecosystem, keep reading! <\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Defender's journey from history to the present day<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Defender for Endpoint<\/a>, part of Microsoft 365 services, was originally launched in 2016 under the name Windows Defender ATP. Initially, the product only supported the Windows operating system and didn’t gain significant market share because its performance and capabilities weren’t particularly impressive. <\/p>

In 2018, Microsoft began to heavily invest in developing Windows Defender ATP. The product’s technical capabilities improved significantly, but despite this, its market share remained relatively low. <\/p>

In 2019, Microsoft rebranded the product as Microsoft Defender Advanced Threat Protection and continued to invest heavily in endpoint protection. At the same time, the product expanded to support all major operating systems (Windows, MacOS, Linux, iOS, and Android). These changes attracted significantly more customers, but the original vision of comprehensive endpoint protection had not yet been fully realized. <\/p>

In 2020, Microsoft once again rebranded, giving the product its current name, Defender for Endpoint. At this point, the long-term investments began to pay off, and Defender for Endpoint finally became a cybersecurity solution that truly impressed organizations. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

The arrival of Defender for Endpoint<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Although Defender for Endpoint succeeded in implementing Microsoft’s vision of comprehensive endpoint protection, it faced a new challenge: the product was aimed at organizations with over 300 users, which meant that a significant portion of smaller organizations using Microsoft 365 services were left without this solution.<\/p>

As a solution to this, Microsoft launched a version for small and medium-sized businesses in 2021 called Defender for Business, which was packaged with Business Premium licensing<\/a>. Technically and feature-wise, Defender for Business largely corresponds to the Defender for Endpoint product. The most significant difference is in log data processing: Defender for Business does not store log data collected from devices in the cloud long-term; instead, the data is deleted after processing. However, log retention can be implemented if needed, for example, using Microsoft Sentinel. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t
Image: Product differences between Defender for Endpoint and Defender for Business versions, image source: Matias Haapaniemi<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

In their current form, both Defender for Endpoint and Defender for Business are highly impressive and offer comprehensive cybersecurity for organizations.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

The technology in practice<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Microsoft’s Defender XDR<\/a> protects endpoints comprehensively. The new cloud-managed solutions utilize Windows’ built-in Windows Defender antivirus and Microsoft Endpoint Detection and Response (EDR) component, MsSense, for countering more sophisticated threats. <\/p>