Great lightweight EDR tool that will cover any type of endpoint.
Use Cases and Deployment Scope
Pros
- Activity logging
- Investigation tools for event search
- Light weight endpoint
Cons
- User interface can be confusing at first.
- Sites vs default site vs groups can be confusing at first
- Occasionally over agressive false positives with other tools like RMM tools
Likelihood to Recommend
If an organization already has a lot of investment in a microsoft centric security stack, it might be more cost effective and simpler to manage using Microsoft Defender for Endpoints.

