Microsoft Defender for Endpoint is an enterprise endpoint security product that supports Mac, Linux and Windows operating systems. With an appropriate Microsoft license, it provides out of the box protection without the need to mass-deploy software or provision sensors across your fleet. Expels favorite feature? The API, which enables our analysts to focus on making decisions rather than worrying about how to use 30+ different technologies to gather the data we need to answer investigative questions. We show you a real example of how we use this tool to triage an alert.”]
Source: https://expel.io/blog/windows-defender-atp-our-two-cents/