What is Microsoft Defender for Endpoint? #
Microsoft Defender for Endpoint (formerly Microsoft Defender Advanced Threat Protection (ATP)) is an enterprise endpoint security platform that helps defend against advanced persistent threats.
Why Should You use the Microsoft Defender for Endpoint Connector? #
The Microsoft Defender for Endpoint connector provides visibility into the software and hardware in your environment. You can use this visibility to:
-
monitor vulnerabilities affecting applications
-
ensure assets are managed per your security policies
-
monitor each endpoint and its status
-
ensure each asset is running the latest version of the Microsoft Defender for Endpoint
How Does This Connector Work? #
Lucidum executes read-only requests to the REST API for Microsoft Defender for Endpoint and ingests only meta-data about Microsoft Defender. Lucidum does not retrieve any data stored on your assets.