Microsoft Defender for Business
Endpoint protection

Microsoft Defender for Business Frequently Asked Questions - Microsoft Defender for Business | Microsoft Learn

In brief

The FAQ title capitalization, sentence punctuation, and wording were updated, including a change from “via” to “by.”

What Defender admins need to know

No administrator action is required; review the updated wording if you reference this FAQ.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

Microsoft Defender for Business frequently asked questionsFrequently Asked Questions - Microsoft Defender for Business | Microsoft Learn

Use this article to get answers to questions you might have about Defender for Business.

How do I try or buy Defender for Business?

We recommend working with a Microsoft partner.

If you prefer to try or buy Defender for Business on your own, go to the Defender for Business product page, and select the option to try or buy Defender for Business.

How do I run custom reports with Defender for Business?

Defender for Business uses Defender for Endpoint APIs for all available capabilities. You can use the APIs with a reporting tool. As an example scenario, you can use a Power BI connector and schedule a PowerShell script to generate executive summaries formatted in HTML, and send those summaries via emailby email.

For more information, see the following resources:

Defender for Business is designed for small and medium-sized businesses who have up to 300 users. Capabilities in Defender for Business include next-generation protection, attack surface reduction, endpoint detection & response (EDR), and automated investigation and remediation. Defender for Business also features simplified configuration and device onboarding options that streamline the overall setup and configuration process.

Defender for Endpoint is an enterprise endpoint security platform designed to help organizations prevent, detect, investigate, and respond to advanced threatsthreats.

  • Defender for Endpoint Plan 1 includes next-generation protection and attack surface reduction capabilities
  • Defender for Endpoint Plan 2 extends Plan 1 capabilities with core vulnerability management capabilities, EDR, automated investigation & remediation, threat hunting, and six months of data retention