- ホーム
- > 洋書
- > 英文書
- > Computer / General
Full Description
Gain an up-to-date, practical understanding of Microsoft Defender for Endpoint and learn how to run it reliably in real environments with this expert-led practitioner's guide.
Key Features
Understand and compare Defender for Endpoint capability on non-Windows operating systems
Learn how to deal with more complex deployment and configuration scenarios
Find new ways of tuning the product to your specific environment
Set yourself up for success by preparing for incidents with recommendations from seasoned professionals
Book DescriptionModern organizations run on constantly changing endpoints, yet many teams still struggle to make Microsoft Defender for Endpoint a dependable control. Coverage gaps, noisy detections, mixed platforms, and unclear device behavior often get in the way of effective prevention, detection, and response.
This second edition helps you tackle those challenges directly. Updated for today's Defender for Endpoint and the broader Microsoft Defender ecosystem, it shows how MDE works across clients, servers, and now mobile devices, and how to align deployments with real-world constraints. New chapters on mobile threat defense, production rollout, and tuning provide practical guidance for moving beyond pilot environments, handling edge cases, and protecting critical and legacy assets.
Throughout, the book brings together IT and SecOps viewpoints to help you operate Defender for Endpoint with more clarity and less friction. You'll learn how to maintain sensor health, interpret incidents confidently, reduce noise without weakening protection, and troubleshoot recurring issues.
Whether you're refining an existing deployment or planning a new one, this edition gives you a clearer path to making Defender for Endpoint a reliable part of your security program.What you will learn
Explore the current Defender for Endpoint architecture and capabilities
Clarify how next-gen protection, ASR, and EDR work together
Prepare a deployment plan that fits your estate, risk, and existing tools
Roll out Defender for Endpoint to production in staged, testable phases
Protect mobile devices using Defender for Endpoint and MTD
Tune alerts, exclusions, and policies for different scenarios and assets
Support SecOps investigations using incidents, hunting, and device data
Diagnose common health, connectivity, and performance issues in live estates
Who this book is forThis book is for cybersecurity professionals, security engineers, incident responders, and endpoint administrators who are responsible for planning, deploying, or operating Microsoft Defender for Endpoint. It assumes a basic understanding of systems management, endpoint security, security baselines, and networking. Returning readers get updated, real-world guidance plus new coverage of mobile devices, production rollouts, and tuning. New readers get a structured introduction from core concepts to deployment, operations, and troubleshooting.
Contents
Table of Contents
A Brief History of Microsoft Defender for Endpoint
Exploring Next-Generation Protection
Introduction to Attack Surface Reduction
Understanding Endpoint Detection and Response
Expanding to Other Platforms
Planning and Preparing for Deployment
Considerations for Deployment and Configuration
Rolling Out to Production
Tuning and SItuational Optimizations
Managing and Maintaining the Security Posture
Establishing Security Operations
Troubleshooting Common Issues
Reference Guide, Tips, and Tricks
