Microsoft Advanced Threat Protection (ATP) Explained

Comparing the different Microsoft Advanced Threat Protection (ATP) solutions: Microsoft Defender ATP, Azure ATP, and Office 365 ATP. What are the options, and what do they give you?
By the time this video uploaded, MS announced another rebranding:
• Microsoft Defender ATP will be renamed to Microsoft Defender for Endpoint
• Office 365 ATP will be renamed to Microsoft Defender for Office 365
• Azure ATP will be renamed to Microsoft Defender for Identity
Links to subscriptions that include ATP solutions:
Some of the links below are affiliate links, which means that if you make a purchase I may receive a commission. This doesn't affect the price, and helps support the channel.
➡️ Office 365 ATP / Defender for O365 (Standalone):
l.linklyhq.com/l/66DV
➡️ M365 Business Premium (O365 ATP P1 / Defender for O365):
l.linklyhq.com/l/66DI
➡️ EM+S E5 (Azure ATP / Defender for Identity)
l.linklyhq.com/l/66DW
➡️ Office 365 E5 (O365 ATP P2 / Defender for Identity):
l.linklyhq.com/l/66DM
➡️ Microsoft 365 E5 (All ATP / Defender Plans):
l.linklyhq.com/l/66DX
💬 Follow Me
AndrewMRQuinn
The Pro Tech Show provides tech, tips, and advice for IT Pros and decision-makers.
Video timestamps:
0:00 - Introduction
1:31 - MS Defender ATP
4:16 - Azure ATP
7:22 - Office 365 ATP
10:20 - Subscriptions
#CyberSecurity #Azure #Office365 #Windows #Microsoft365

[@ProTechShow]

*Update:* By the time this video uploaded, MS announced another rebranding: Microsoft Defender ATP will be renamed to Microsoft Defender for Endpoint Office 365 ATP will be renamed to Microsoft Defender for Office 365 Azure ATP will be renamed to Microsoft Defender for Identity

[@PeterMocker]

I watched this video earlier today, and then moments ago saw the rebranding news and came here to mention it. Timing is funny, right?

[@ProTechShow]

@@PeterMocker Tell me about it! Good old Microsoft... I should just do a weekly show on "What have they renamed today?".

[@MarsorryIckuatuna]

Ah, you caught that quickly.

[@tanzidataneya1233]

@@ProTechShow plz help me with a deck for all new renamed ones. I have a presentation to make. Im confused.

[@ghanus2009]

@@tanzidataneya1233 Dont worry, you customers will be confused anyway.

[@lionelmasoane391]

Lovely, with all the confection I had, you just helped me understood, like why all is called ATP, and how all is different from each other.

[@ProTechShow]

Glad it helped!

[@Sto79Be]

Great explanation that really helped me understand the differences, thank-you!

[@ProTechShow]

Glad it helped 👍

[@chloechapman49]

You have really simplified me and helped me avoid getting mixed up with the 3 ATP products thank you ☺️

[@ProTechShow]

Thanks. Glad it helped!

[@NikolayUnguzov]

These videos must be part of Microsoft docs. Great real-world explanation!

[@ProTechShow]

Thanks 🙂 Microsoft's docs struggle to keep up with their frequent name changes as it is. I dread to think how out-of-date they'd get if they were videos!

[@AlexSanchezber]

Loved your video! I love how I came for ATP specifically and the name Pro Tech was kind of a play on ProTect. Love it. Subscribed on both of my account haha. Cheers

[@ProTechShow]

Thanks. The ProTect thing is a happy coincidence, but I like it!

[@AlexSanchezber]

@@ProTechShow haha I figured as much but it worked out nicely. Keep up the great work! It's my day off and I'll probably catch up on your recent stuff. Happy to see you're still active. Keep doing it even when the going gets tough!

[@thekoaman]

This was great... thank you for that explanation. So many options with O35 but you made it pretty simple.

[@ProTechShow]

Glad it helped!

[@johnparker1771]

Great vid, can you make a vid on the new 'Explorer' section for Microsoft Defender for O365 ATP that covers phishing emails etc

[@ProTechShow]

Thanks for the suggestion! I'll stick it on the idea list.

[@freezydoesit2807]

Useful info how to distinguish between the offerings. Thanks for the video!

[@ProTechShow]

Glad it was useful!

[@crustycrustacean1980]

Great explanation for what has become a minefield of similar sounding/ renamed licences.

[@ProTechShow]

Thanks!

[@rupeshravi]

Nice video Andrew, I enjoyed it. I am making a ppt for my team on how to make use of ATP, You made my day. Thank you for the good work.

[@ProTechShow]

Thanks! Glad it helped 🙂

[@tanzidataneya1233]

I need to understand the difference of all types of Microsoft defender offer. Endpoint, m365, and defender for azure. And if someone wants to get standalone how can we purchase. Cam you share a link or a deck?

[@sajalbansal8586]

Thanks for clearing some of my confusions with these different products. Can't you/customers give feedback to Microsoft to simplify their security offerings? So that it is easy to understand and work with.

[@ProTechShow]

Haha. I wish... In my experience Microsoft can be great when they decide to engage with you, but unless they explicitly come to you for feedback or you are able to prove (formally, with documentation) a significant negative impact to a large number of their customers, they aren't very interested in listening.

[@IsmailMumin-p7e]

Hey, could you please show me or tell, how to allow the internal Excel sheet that's are blocked by defender because of the Macro, please note i am not seeking for individual Excel document, its for domain users. thank you

[@ilyasontube]

Great explanation, thanks you! Could you make a video on the basic setup for azure ATP? Does it monitor only users or any principles communicating with the resources (i.e function app)?

[@ProTechShow]

Thanks. It's analysing network traffic from domain controllers, so it's only monitoring Active Directory accounts that exist in on-premises ADDS, not Azure AD.

[@delblerferreiramrgn]

Good evening Office 365 E5 This subscription comes with the ATP included in the package, has items Microsoft Defender Identity Protection Identity in addition to the Azure AD Identity Protection items (Defender Identity and Azure AD Identity Protection, these are items that are not billed separately from the subscription office 365 E5???

[@ProTechShow]

You might be mixing up "Office 365 E5" with "Microsoft 365 E5". The names are very similar, but the M365 licence comes with additional security products from the EM+S suite, whereas O365 does not.

[@calvinmcilroy386]

Great explanation. Thanks!

[@ProTechShow]

You're welcome!

[@AlasdairG2000]

Very good description. Thanks for sharing this!

[@ProTechShow]

Glad it was helpful!

[@jonathanjoshua5230]

Thank you, very informative video.

[@ProTechShow]

Thanks! Glad it was useful.

[@opterrellc5987]

Brilliant video! I've spoken directly with MSFT people about their ATP solutions since my last post, but your explanation was far and away more clear, more succinct, and more enjoyable than listening to them.

[@ProTechShow]

Thanks! No doubt I'll need to do another one in the future explaining what the many "Defender" products are now they've decided to rebrand again.

[@ollelundberg7322]

System Power Automate is that ATP ?

[@mihirpatel3754]

How do I make this work with Windows 2012 OS which doesn't come with builtin MS Defender AV?

[@ProTechShow]

System Center Endpoint Protection is the installable AV client for older versions. Basically the same thing as the built-in Defender AV with centralised management via SCCM. Weirdly, although Server 2008 R2 and 2012 R2 are both listed as supported for Defender ATP / Defender for Endpoint, I don't see 2012 (not R2) on the list: docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/tvm-supported-os

[@Sodara-168]

Haha, I watched this video in 2021, but it is a great video. Thank you so much, bro.

[@ProTechShow]

Thanks 🙂

[@BeckChen]

你真的簡化了我，幫助我避免混淆 3 ATP 產品 謝謝

[@ProTechShow]

Glad it helped!

[@GodIsWithin3]

Great insight, thank you.

[@ProTechShow]

You're welcome!

[@VamsiKrishna-di7qo]

Great work! Simple and to the point

[@ProTechShow]

Thanks!

[@unusyousuf9506]

Can you do a video on Windows 10 Autopilot?

[@ProTechShow]

Thanks for the suggestion. I'll put it on the ideas list. 👍

[@crustycrustacean1980]

Yes, please do a video on this 🙏

[@ProTechShow]

Here you go: kzbin.info/www/bejne/rpvFi5mEft-Uec0

[@MarsorryIckuatuna]

Thank you - crystal clear!

[@ProTechShow]

Glad it helped

[@zeesmart6540]

Should Defender in Azure works without Security center in E5 subscription , please help

[@ProTechShow]

Azure Defender is a different product - it isn't covered in this video. An E5 subscription relates to Microsoft 365, not Azure. There's a Microsoft 365 Security Center and an Azure Security Center. Although the names are similar they are different portals for managing cloud products.

[@zeesmart6540]

@@ProTechShow for E5, is Defender ATP sufficient or MS Security Center controls are also needed for the security of hybrid solutions

[@ProTechShow]

@@zeesmart6540 the security center isn't really a separate product, it's more a portal that gives access to features of various subscriptions you may have purchased. I can't tell you what subscriptions are appropriate for your business, but if you've bought some and they show in the security center then you may as well take a look at them.

[@mridulkumar8574]

Does microsoft 365 ATP secures account from email bombing

[@ProTechShow]

I don't recall seeing that mentioned as a specific feature. There is rate limiting built into Exchange Online, but that's really more about protecting Microsoft's infrastructure than your mailbox. Judging by the amount of emails I receive from one particular customer at the moment I'd guess the answer is "no"! 😆

[@leonardk4123]

@Microsoft - Sponsor this guy, for making life easier for all of us - including some of us that subscribe to your E5

[@ProTechShow]

Thanks Leonard - glad it helped you Microsoft... 📞😉

[@kirubaaace]

Informative video..this helps

[@ProTechShow]

Thanks!

[@playbassken]

Well done!

[@ProTechShow]

Thanks! 🙂

[@yuliyacher67]

Thank you!

[@ProTechShow]

You're welcome 🙂

[@unusyousuf9506]

Can u do a video on windows as a service??

[@ProTechShow]

Thanks for the suggestion. I've heard this phrase used for both before, so just checking... are you referring to the Windows 10 servicing model, or Azure-based virtual desktops?

[@unusyousuf9506]

Can u make a video that takes about both??

[@ProTechShow]

@@unusyousuf9506 I'll put them both on the list, although they're both fairly unrelated so probably better as separate videos

[@ermiasts]

Great content!

[@ProTechShow]

Thanks 🙂

[@TN_HondaDad]

"looks dodgy" love that UK term lol

[@lgiraq5918]

good work

[@ProTechShow]

Thanks 🙂

[@darrelbutil9780]

nice

[@ProTechShow]

Thanks 🙂

[@darrelbutil9780]

@@ProTechShow just want to ask what would happen if you remove one of your domain in safe senders list in office 365

[@ProTechShow]

As a general rule your own domain shouldn't be in there. O365 already knows about your accounts so if you bypass scanning for your own domain you're usually only making it easier for bad actors to send your staff phishing emails.

[@psychedelica305]

i want a refund give me my time back:(

[@christaverner3560]

Great explanation, thank you!

[@ProTechShow]

Glad it helped 🙂