News

Microsoft Finishes Integrating Windows Defender ATP with Hexadite Buy

Windows Defender Advanced Threat Protection (ATP) will soon be able to fix security issues instead of just detecting them, according to Microsoft this week.

Originally, Microsoft touted Windows Defender ATP as a post-breach analysis tool to be used after an organization had experienced a security issue. Microsoft combines machine learning and security personnel expertise to deliver this forensics support with the service.

However, Microsoft has been working to integrate the service with security automation and remediation technology it acquired when it bought Hexadite, making Windows Defender ATP a tool that can fix security problems, too.

On Tuesday, Microsoft announced that it has completed that integration work. A preview of Windows Defender ATP with the new autoremediation capabilities is expected to be available sometime "later this year," Microsoft's announcement indicated.

The integrated Hexadite technology is designed to take over the forensic work that typically might have been done manually by humans. It uses artificial intelligence technology as part of that process.

Here's how Microsoft's announcement described it:

This [integration of Hexadite's technology] enables Windows Defender ATP customers to leverage state of the art AI technology to solve their alert volume challenges by letting Windows Defender ATP automatically investigate alerts, apply artificial intelligence to determine whether a threat is real and to determine what action to take, going from alert to remediation in minutes at scale. With this addition, Windows Defender ATP now covers the end-to-end threat lifecycle from detection to investigation and response automatically.

In late June, Microsoft described a forthcoming "Windows Defender ATP console" that will provide a single-pane security view, showing information from new security features. For instance, it'll show information from Windows Defender Exploit Guard (which blocks macros and executable files) and Windows Defender Application Guard (which protects the operating system from potentially malicious Web content at untrusted sites), among other such integrations. This "smarter" console is expected to appear with arrival of the Windows 10 "Fall Creators Update," which Microsoft indicated would be available on Oct. 17.

The Windows Defender ATP service is currently available to Microsoft 365 Enterprise E5 subscribers, as shown in the table here, although the Hexadite technology aspect is yet to come. Microsoft recently changed its licensing branding to "Microsoft 365" from its older "Secure Productive Enterprise" name.

Windows Defender ATP first reached "general availability" status last year when Microsoft released the Windows 10 "Anniversary Update," according to a Microsoft spokesperson. However, the service still gets new features added, which typically arrive in preview form first.

Microsoft's future plans for Windows Defender ATP include support for Windows Server products as well, "starting with Windows Server 2012 R2 and 2016 releases," Microsoft had indicated back in late June. In addition, Windows Defender ATP support is being planned for "more platforms beyond Windows," Microsoft had said.

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

  • IBM Giving Orgs a Governance Lifeline in Agentic AI Era

    Nearly overnight, organizations are facing brand-new challenges caused by self-directed AI systems (a.k.a. agentic AI). Big Blue is extending them some help.

  • Microsoft Launches Integrated E-mail Security Ecosystem for Defender for Office 365

    Microsoft is expanding its e-mail security capabilities with the launch of a new Integrated Cloud Email Security (ICES) ecosystem for Microsoft Defender for Office 365.

  • Microsoft Joins Workday's AI Agent Partner Network

    Microsoft has become a key partner in Workday's newly launched AI Agent Partner Network, aligning with other industry leaders to integrate AI agents into enterprise workforce systems.

  • LinkedIn CEO Ryan Roslansky To Lead Microsoft's Productivity Initiatives

    In a strategic leadership realignment, Microsoft has appointed LinkedIn CEO Ryan Roslansky to oversee its consumer and small business productivity software division, encompassing Microsoft 365, Teams and AI-driven tools like Copilot.