Architect Microsoft Defender ATP

Onboard devices to the Microsoft Defender ATP service

Microsoft Defender Advanced Threat Protection (ATP) is a platform designed to help enterprise networks prevent, detect, investigate, and respond to advanced threats. Microsoft Defender ATP architecture based on your organizational needs and then assist your Security Operations Center (SOC) in onboarding devices and securing endpoints.

Microsoft Endpoint Manager

• Microsoft Intune
• Configuration Manager

Integrating Microsoft Defender ATP into the SOC

• WHICH ARCHITECTURE?

o   Cloud-native architecture

o   On-premises architecture

o   Co-management architecture

o   Script and evaluation architecture

• WHAT DEPLOYMENT METHOD?

o   Onboard Microsoft Defender ATP using Microsoft Intune

o   Onboard to Microsoft Defender ATP using Microsoft Intune and Configuration Manager

o   Onboard to Microsoft Defender ATP using Configuration Manager or Group Policy Objects

o   Onboard to Microsoft Defender ATP using local scripts

Microsoft Defender ATP adoption order