diff --git a/windows/security/wdatp/index.md b/windows/security/wdatp/index.md index 7a0ca592f1..2b05e374ae 100644 --- a/windows/security/wdatp/index.md +++ b/windows/security/wdatp/index.md @@ -13,14 +13,11 @@ ms.date: 06/04/2018 # Windows Defender Advanced Threat Protection -Windows Defender Advanced Threat Protection (Windows Defender ATP) is a unified endpoint security platform using built-in security technologies working together and powered by the cloud. +Windows Defender Advanced Threat Protection (Windows Defender ATP)is a unified platform for preventative protection, post-breach detection, automated investigation and response, employing intelligent protection to protect endpoints from cyber threats. -![Windows Defender ATP service components](images/WDATP-components.png) ![Windows Defender ATP components](images/wdatp-pillars.png) -Windows Defender ATP offers a comprehensive approach in securing enterprise networks by offerring an end-to-end stack of security capabilities. - The attack surface reduction set of capabilities provide the first line of defense in the stack. By ensuring configuration settings are properly set and exploit mitigation techniques are applied, these set of capabilities resist attacks and exploitations. @@ -38,7 +35,7 @@ The following table can help you better understand how capabilities align within Attack surface reduction | Next generation protection | Endpoint detection and response | Auto investigation and remediation | Security posture :---|:---|:---|:---|:--- -[Windows Defender SmartScreen](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview) OTHER PRODUCTS??
OR
Hardware based isolation

Application control

Exploit protection

Network protection

Controlled folder access | [Windows Defender Antivirus](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10)
OR
Web protection

Machine learning

Script and memory attack protection

Antivirus

Runtime emulator

Threat intelligence

URL/IP reputation

Sandbox service | Deep operating system recording sensor

Machine learning, behavioral and anomaly detection

Response containment

Realtime and historical threat hunting

Threat intelligence and custom detections | Forensic collection

Response orchestration

Historical endpoint data

Artificial intelligence reponse playbooks | Asset inventory
Operating system baseline compliance

Recommended improvement actions

Secure score

Threat analytics

Reporting and trends + Hardware based isolation

Application control

Exploit protection

Network protection

Controlled folder access | Web protection

Machine learning

Script and memory attack protection

Antivirus

Runtime emulator

Threat intelligence

URL/IP reputation

Sandbox service | Deep operating system recording sensor

Machine learning, behavioral and anomaly detection

Response containment

Realtime and historical threat hunting

Threat intelligence and custom detections | Forensic collection

Response orchestration

Historical endpoint data

Artificial intelligence reponse playbooks | Asset inventory
Operating system baseline compliance

Recommended improvement actions

Secure score

Threat analytics

Reporting and trends These capabilities are available across multiple products that make up the Windows Defender ATP platform. For more information on how to leverage all the Windows Defender ATP capabilities, see [Threat protection](https://docs.microsoft.com/en-us/windows/security/threat-protection/index).