Microsoft Defender XDR: The Collected Services

• Microsoft Defender XDR is a family of freestanding, paid services for securing data, devices, and user credentials.
• These services are typically licensed as a part of Microsoft 365 E5 Security or the full Microsoft 365 E5 suite.
• It is becoming increasingly difficult to license these as individual services because they are intertwined to help customers discover incidents more rapidly.
• Customers will often need to augment these services with Microsoft Sentinel and Azure Monitor for a complete solution.

Microsoft Defender XDR is both a family of security services that can be licensed independently or collectively within Microsoft 365 E5 suites, and a portal that increasingly offers unification of the four services to help customers discover and resolve security incidents more rapidly.

Four Premium Security Services

Principally licensed through the per-user Microsoft 365 E5 suite or the Microsoft 365 E5 Security sub-suite, the Microsoft Defender XDR services include a range of Microsoft-hosted defenses for client devices, Office 365 services and data, Active Directory (AD) on-premises, and Web-based applications, all of which have increasingly combined their data into a unified security portal (security.microsoft.com) now referred to as the Microsoft Defender XDR portal.