Skip to content

Microsoft Defender for Business

Detection of and response to attacks on workstations and servers (endpoint detection and response). We enable the standard policies, and the Netsource service desk reviews the alerts.

01

Your Benefits

6 points
B.01

Your devices are much better protected against ransomware, phishing and zero-day attacks

B.02

Suspicious activity goes to the Netsource service desk as an alert, not to you

B.03

A web filter blocks known phishing and malware domains

B.04

You see the device inventory in one place and the compliance status at a glance

B.05

Defender investigates and resolves many incidents automatically, which takes load off your IT administrators

B.06

We manage the policies centrally via Microsoft Intune

02

Service scope

7 Building blocks
L.01

Defender for Business licence per user, up to 5 devices per user

L.02

Set-up scripts for Windows 10/11, Server 2016+ and macOS

L.03

Standard policies for antivirus, attack surface reduction (ASR) and web protection

L.04

We configure the cloud protection level and sample submission

L.05

Netsource assesses alerts Mon–Fri

L.06

Monthly security report with detected threats and trends

L.07

Once a year we review the policies and adapt them to the current threat landscape

03

Requirements and exclusions

What is needed and what is not included

→ Prerequisites

  • For businesses with up to 300 users: included in Microsoft 365 Business Premium, and available as a standalone licence with other plans (e.g. Business Basic or Standard)
  • For Microsoft 365 E3/E5, Defender for Endpoint is the intended product, not Defender for Business
  • Devices are managed by Intune or provisioned via GPO
  • A maintenance contract, if you need a guaranteed response time
  • An internet connection for the cloud-based protection features

✗ Not included

  • Defender for Cloud Apps (CASB) and Defender for Identity are separate licences
  • Servers need a licence of their own (Defender for Business servers)
  • In-depth forensic analysis of individual incidents is charged by the hour (NDS-OP-KON25)
  • Custom detection rules are handled in Wazuh (NDS-SEC-WAZUH), not in Defender
  • Compliance audits (ISO 27001, BSI IT-Grundschutz) are a consulting service (NDS-PRJ-COMPL)
  • We clean up complex infections manually as an additional service
[ NDS-DEF-EP ] [ netsource.de ]
Next step

Does this fit your business?

In 30 minutes we work out whether this service suits you. Free and without obligation.