Microsoft 365 Defender

E193825

Microsoft product cloud-based security suite security platform

Microsoft 365 Defender is Microsoft’s unified, cloud-based security suite that coordinates protection, detection, and response across endpoints, email, identities, and applications in the Microsoft 365 ecosystem.

Try in SPARQL Jump to: Surface forms Disambiguation Statements Elicitation Referenced by

All labels observed (7)

Label	Occurrences
Microsoft 365 Defender portal	6
Microsoft 365 Defender canonical	3
Microsoft 365 compliance	1
Microsoft Defender	1
Microsoft Defender XDR	1
Microsoft Threat Protection	1
cloud app security	1

How this entity was disambiguated

This entity first appeared as the object of triple T1719263 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.

NED1 Entity disambiguation (via context triple) gpt-5-mini-2025-08-07

Target entity: Microsoft 365 Defender
Context triple: [Windows Defender, integratesWith, Microsoft 365 Defender]

A. Microsoft Defender for Office 365
Microsoft Defender for Office 365 is a cloud-based email and collaboration security solution that protects Microsoft 365 users from phishing, malware, and other advanced threats.
B. Azure Security Center
Azure Security Center is a cloud security management and threat protection service that helps monitor, harden, and defend workloads running in Microsoft Azure and hybrid environments.
C. Azure Purview
Azure Purview is a unified data governance and catalog service from Microsoft that helps organizations discover, classify, and manage data across on-premises, multi-cloud, and SaaS sources.
D. Intune
Intune is Microsoft’s cloud-based endpoint management and mobile device management (MDM) service used to securely manage users’ devices, apps, and policies across an organization.
E. Microsoft 365 E5
Microsoft 365 E5 is a premium enterprise subscription suite that combines Office apps, advanced security, compliance, analytics, and voice capabilities for large organizations.
F. None of above. chosen
G. Unsure - the case is ambiguous/there is not enough information to decide.

NED2 Entity disambiguation (via description) gpt-5-mini-2025-08-07

Target entity: Microsoft 365 Defender
Target entity description: Microsoft 365 Defender is Microsoft’s unified, cloud-based security suite that coordinates protection, detection, and response across endpoints, email, identities, and applications in the Microsoft 365 ecosystem.

A. Microsoft Defender for Office 365
Microsoft Defender for Office 365 is a cloud-based email and collaboration security solution that protects Microsoft 365 users from phishing, malware, and other advanced threats.
B. Azure Security Center
Azure Security Center is a cloud security management and threat protection service that helps monitor, harden, and defend workloads running in Microsoft Azure and hybrid environments.
C. Azure Purview
Azure Purview is a unified data governance and catalog service from Microsoft that helps organizations discover, classify, and manage data across on-premises, multi-cloud, and SaaS sources.
D. Intune
Intune is Microsoft’s cloud-based endpoint management and mobile device management (MDM) service used to securely manage users’ devices, apps, and policies across an organization.
E. Microsoft 365 E5
Microsoft 365 E5 is a premium enterprise subscription suite that combines Office apps, advanced security, compliance, analytics, and voice capabilities for large organizations.
F. None of above. chosen

Statements (48)

Predicate	Object
instanceOf	Microsoft product ⓘ cloud-based security suite ⓘ security platform ⓘ
accessedVia	Microsoft 365 Defender self-linksurface differs ⓘ surface form: Microsoft 365 Defender portal
deploymentModel	cloud-based ⓘ
developer	Microsoft ⓘ
hasFormerName	Microsoft 365 Defender self-linksurface differs ⓘ surface form: Microsoft Threat Protection
integratesWith	Azure Active Directory ⓘ Microsoft 365 ⓘ Microsoft Defender for Cloud Apps ⓘ Microsoft Defender for Endpoint ⓘ Microsoft Defender for Identity ⓘ Microsoft Defender for Office 365 ⓘ Microsoft Entra ⓘ surface form: Microsoft Entra ID
licenseModel	subscription-based ⓘ
offersFeature	API integration ⓘ advanced hunting ⓘ role-based access control ⓘ unified incident queue ⓘ
partOf	Microsoft 365 ⓘ Microsoft Security portfolio ⓘ
primaryFunction	threat detection ⓘ threat protection ⓘ threat response ⓘ
protects	applications ⓘ email ⓘ endpoints ⓘ identities ⓘ
providesCapability	attack surface reduction ⓘ automated investigation ⓘ automated remediation ⓘ centralized security portal ⓘ extended detection and response ⓘ incident correlation ⓘ threat analytics ⓘ
securityDomain	cloud app security ⓘ email security ⓘ endpoint security ⓘ identity security ⓘ
supportsPlatform	Android ⓘ Linux ⓘ Windows ⓘ iOS ⓘ macOS ⓘ
targetUser	enterprises ⓘ small and medium businesses ⓘ
usesTechnology	artificial intelligence ⓘ machine learning ⓘ

How these facts were elicited