--- title: "Windows Defender ATP: Intelligent Protection for Modern Threats" description: There isn’t much an organization can do to reduce the number of security threats it faces on a daily basis. Organizations can make the job of a hacker more difficult by reducing the attack surface. Attack surface reduction is one of the core capabilities of Microsoft Windows Defender Advanced Threat Protection (ATP). image: https://info.adaptivedge.com/hubfs/adaptivedge-data-protection.jpg --- Call us Today! (866) 846-7123 [![AdaptivEdge](https://info.adaptivedge.com/hs-fs/hubfs/adaptivedge.png?width=249&height=50&name=adaptivedge.png "AdaptivEdge")](http://adaptivedge.com/) - [Expertise](http://adaptivedge.com/expertise/) - [Microsoft AI Tools](https://adaptivedge.com/expertise/ai-consulting-services/) - [Azure AI](ttps://adaptivedge.com/expertise/azure-ai-consulting/) - [Microsoft AI Builder](https://adaptivedge.com/expertise/microsoft-ai-builder-consulting/) - [Syntex](https://adaptivedge.com/expertise/microsoft-syntex-consulting/) - [Copilot](https://adaptivedge.com/expertise/microsoft-copilot-consulting/) - [Power Platform](https://adaptivedge.com/expertise/power-platform-consulting/) - [Power BI](https://adaptivedge.com/expertise/power-bi-consulting-and-implementation-services/) - [Power Apps](https://adaptivedge.com/expertise/power-apps-consulting-and-development/) - [Power Automate](https://adaptivedge.com/expertise/power-automate-consulting-and-development/) - [Power Pages](https://adaptivedge.com/expertise/power-pages-consulting-experts/) - [Defender](https://adaptivedge.com/expertise/microsoft-defender-consulting/) - [Defender for Endpoint](https://adaptivedge.com/expertise/microsoft-defender-consulting/endpoint/) - [Defender for Cloud](https://adaptivedge.com/expertise/microsoft-defender-consulting/cloud/) - [Defender for Identity](https://adaptivedge.com/expertise/microsoft-defender-consulting/identity/) - [Defender for Office 365](https://adaptivedge.com/expertise/microsoft-defender-consulting/office-365/) - [Microsoft 365](https://adaptivedge.com/expertise/microsoft-365/) - [Azure](https://adaptivedge.com/expertise/microsoft-azure/) - [Intune](https://adaptivedge.com/expertise/microsoft-intune/) - [Corporate Device Enrollment](https://adaptivedge.com/expertise/microsoft-intune/corporate-device-enrollment/) - [GPO-to-Intune Migration](https://adaptivedge.com/expertise/microsoft-intune/gpo-to-intune-migration/) - [MAM without Enrollment](https://adaptivedge.com/expertise/microsoft-intune/mam-without-enrollment/) - [Device Compliance](https://adaptivedge.com/expertise/microsoft-intune/device-compliance/) - [SharePoint](https://adaptivedge.com/expertise/sharepoint-online/) - [Teams](https://adaptivedge.com/expertise/microsoft-teams/) - [OneDrive](https://adaptivedge.com/expertise/one-drive-for-business/) - [Entra](https://adaptivedge.com/expertise/entra-consulting/) - [Solutions](http://adaptivedge.com/services/) - [M365 Migrations](https://adaptivedge.com/services/microsoft-365-migration-services/) - [SharePoint Migration](https://adaptivedge.com/services/sharepoint-migration-services/) - [Divestitures & Carve-Outs](https://adaptivedge.com/services/it-divestiture-and-carve-out-consulting/) - [Mergers and Acquisitions](https://adaptivedge.com/services/it-merger-and-acquisition-m-a-services/) - [Data Center-to-Azure](https://adaptivedge.com/services/azure-migration-services/) - [Box & Dropbox to Microsoft](https://adaptivedge.com/services/box-and-dropbox-migrations-to-microsoft-365/) - [Google Workspace to Microsoft](https://adaptivedge.com/services/google-workspace-to-microsoft-migrations/) - [File Server to Microsoft 365](https://adaptivedge.com/services/migrate-file-server-to-microsoft/) - [Enterprise Collaboration](https://adaptivedge.com/services/enterprise-collaboration-consulting/) - [Information Architecture](https://adaptivedge.com/services/microsoft-information-architecture/) - [Audio & Video Web Conferencing](https://adaptivedge.com/services/audio-video-conferencing-consultants/) - [eb Portal Development (Intranet & Extranet)](https://adaptivedge.com/services/web-portal-intranet-consulting-services/) - [ecords & Document Management](https://adaptivedge.com/services/document-management-consulting/) - [IT Security & Compliance](https://adaptivedge.com/services/it-cybersecurity-compliance-consulting-services/) - [Identity & Access Management](https://adaptivedge.com/services/iam-identity-access-management-services/) - [Endpoint & BYOD Security](https://adaptivedge.com/services/endpoint-protection-services-byod-security/) - [Managed Cloud Backup Services](https://adaptivedge.com/services/managed-cloud-backup-consulting/) - [Data Privacy](https://adaptivedge.com/services/data-privacy-security-protection-consulting/) - [Business Process Automation](https://adaptivedge.com/services/business-process-automation-consulting/) - [vCTO](https://adaptivedge.com/services/vcto/) - [Microsoft Licensing CSP](https://adaptivedge.com/services/microsoft-licensing-csp-partner/) - [Project Management](https://adaptivedge.com/services/project-management/) - [About](http://adaptivedge.com/about/) - [Resources](https://info.adaptivedge.com/resources/) - [Contact](http://adaptivedge.com/contact-us/) - [Schedule a Consultation](https://adaptivedge.com/consultation/) # Windows Defender ATP: Intelligent Protection for Modern Threats 2018-12-12 19:49:25 Posted by [aeadmin](https://info.adaptivedge.com/blog/author/aeadmin) on Dec 12, 2018, 11:49:25 AM - [Tweet](https://twitter.com/share)   There isn’t much an organization can do to reduce the number of security threats it faces on a daily basis. Hackers will be hackers. They constantly develop new techniques and tools that allow them to carry out as many attacks as possible. However, organizations can make the job of a hacker more difficult by reducing the attack surface. The attack surface is made up of all the vulnerabilities that a hacker might be able to access on the network, computing devices, software code or physical assets. When you shrink the attack surface by closing or eliminating potential vulnerabilities, you limit the options of hackers and can better focus your defenses. **Attack surface reduction is one of the core capabilities of Microsoft Windows Defender Advanced Threat Protection (ATP).** Windows Defender ATP is a unified endpoint detection and response platform that provides protection against actions and applications used by emerging threats. [**Attack surface reduction**](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard) protects against file-less and file-based attacks with host intrusion prevention, vulnerability mitigation and application control. This feature uses rules to enable or disable specific behaviors that would indicate the presence of a threat, such as ransomware and executable files and scripts that attempt to download or run files in Office applications or webmail. Windows Defender ATP also includes rules for suspicious scripts and abnormal application behavior. A recent update to Windows Defender ATP includes two new rules, which brings the grand total to 14, each of which targets malware techniques commonly used by hackers. **The two new rules focus on preventing Outlook and Adobe Reader from creating child processes at the workstation level.** This would eliminate attacks that use macros and vulnerability exploits to download malware. When any attack surface reduction rule is activated and an application or file is blocked, an alert from the Action Center is displayed on the user’s device. In addition to attack surface reduction, **[Windows Defender ATP offers a number of features](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp)** **that reduce the risk and impact of data breaches by enabling intelligent threat protection, detection, investigation and response.** Windows Defender ATP uses next-generation antivirus, behavior monitoring, machine learning and security analytics to ensure that security teams have the tools and visibility to detect and investigate advanced threats. Automated response to security incidents takes you from alert to remediation in minutes. Cloud-based artificial intelligence automatically investigates each new alert, assesses the complexity and severity of the threat, and takes the appropriate action to remediate. To make sure your organization is prepared to deal with the most sophisticated threats, security teams can use Secure Score to run reports on devices across your security infrastructure. As we discussed in an [earlier post](https://info.adaptivedge.com/blog/have-you-taken-appropriate-steps-to-secure-office-365), Secure Score identifies the Office 365 services in use, analyzes your settings and activity patterns, and compares them to the Microsoft baseline. You’ll then receive a score that tells you the state of security, as well as recommendations for improvement. Security threats are constantly increasing in number and sophistication. Let us show you how Windows Defender ATP reduces the attack surface, detects advanced threats, automates the response to security incidents, and helps you stay up to date with security best practices. ***Written and composed by Principal, Steve Soper*** Tags: [cybersecurity](https://info.adaptivedge.com/blog/tag/cybersecurity), [Microsoft](https://info.adaptivedge.com/blog/tag/microsoft), [Secure Score](https://info.adaptivedge.com/blog/tag/secure-score), [Attack Surface](https://info.adaptivedge.com/blog/tag/attack-surface), [Windows Defender ATP](https://info.adaptivedge.com/blog/tag/windows-defender-atp) [![Are You Secure? Score a FREE O365 Security Assessment.](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/3330897/39721f23-2ea5-4dd5-a004-45ed24f6e8b4.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/3330897/39721f23-2ea5-4dd5-a004-45ed24f6e8b4) ### We're here to help! We'd love to find out more about the projects and initiatives you're working on to exchange ideas and provide some high-level guidance where we can.  We love learning from others as well as sharing some of our experience and lessons learned.  [Let's talk!](http://adaptivedge.com/contact-us/) ### Subscribe to Email Updates ### Recent Posts ### Posts by Tag - [SharePoint (47)](https://info.adaptivedge.com/blog/tag/sharepoint) - [Microsoft (44)](https://info.adaptivedge.com/blog/tag/microsoft) - [Technology (37)](https://info.adaptivedge.com/blog/tag/technology) - [Office 365 (32)](https://info.adaptivedge.com/blog/tag/office-365) - [adaptivedge (27)](https://info.adaptivedge.com/blog/tag/adaptivedge) - [cybersecurity (26)](https://info.adaptivedge.com/blog/tag/cybersecurity) - [microsoft gold partner (20)](https://info.adaptivedge.com/blog/tag/microsoft-gold-partner) - [OneDrive (19)](https://info.adaptivedge.com/blog/tag/onedrive) - [ATS (18)](https://info.adaptivedge.com/blog/tag/ats) - [HRIS (18)](https://info.adaptivedge.com/blog/tag/hris) - [Human Resources (18)](https://info.adaptivedge.com/blog/tag/human-resources) - [Azure (17)](https://info.adaptivedge.com/blog/tag/azure) - [MS Announcement (16)](https://info.adaptivedge.com/blog/tag/ms-announcement) - [Microsoft Entra (15)](https://info.adaptivedge.com/blog/tag/microsoft-entra) - [data loss prevention (14)](https://info.adaptivedge.com/blog/tag/data-loss-prevention) - [microsoft teams (14)](https://info.adaptivedge.com/blog/tag/microsoft-teams) - [DLP (13)](https://info.adaptivedge.com/blog/tag/dlp) - [Office 2013 (12)](https://info.adaptivedge.com/blog/tag/office-2013) - [Purview (12)](https://info.adaptivedge.com/blog/tag/purview) - [bookings (12)](https://info.adaptivedge.com/blog/tag/bookings) - [exchange (12)](https://info.adaptivedge.com/blog/tag/exchange) - [outlook (12)](https://info.adaptivedge.com/blog/tag/outlook) - [Cloud (10)](https://info.adaptivedge.com/blog/tag/cloud) - [Governance (8)](https://info.adaptivedge.com/blog/tag/governance) - [microsoft 365 (8)](https://info.adaptivedge.com/blog/tag/microsoft-365) - [security (8)](https://info.adaptivedge.com/blog/tag/security) - [Enterprise (7)](https://info.adaptivedge.com/blog/tag/enterprise) - [Private Cloud (7)](https://info.adaptivedge.com/blog/tag/private-cloud) - [Onboarding (6)](https://info.adaptivedge.com/blog/tag/onboarding) - [cyberattack (6)](https://info.adaptivedge.com/blog/tag/cyberattack) - [system center (6)](https://info.adaptivedge.com/blog/tag/system-center) - [IoT (5)](https://info.adaptivedge.com/blog/tag/iot) - [Mobile HR (5)](https://info.adaptivedge.com/blog/tag/mobile-hr) - [PowerShell (5)](https://info.adaptivedge.com/blog/tag/powershell) - [Teams (5)](https://info.adaptivedge.com/blog/tag/teams) - [microsoft azure (5)](https://info.adaptivedge.com/blog/tag/microsoft-azure) - [Active Directory (4)](https://info.adaptivedge.com/blog/tag/active-directory) - [Compliance (4)](https://info.adaptivedge.com/blog/tag/compliance) - [Employee Engagement (4)](https://info.adaptivedge.com/blog/tag/employee-engagement) - [Employee Satisfaction (4)](https://info.adaptivedge.com/blog/tag/employee-satisfaction) - [Licensing (4)](https://info.adaptivedge.com/blog/tag/licensing) - [O365 (4)](https://info.adaptivedge.com/blog/tag/o365) - [Secure Score (4)](https://info.adaptivedge.com/blog/tag/secure-score) - [privileged accounts (4)](https://info.adaptivedge.com/blog/tag/privileged-accounts) - [AI (3)](https://info.adaptivedge.com/blog/tag/ai) - [Adaptive Edge (3)](https://info.adaptivedge.com/blog/tag/adaptive-edge) - [Classification (3)](https://info.adaptivedge.com/blog/tag/classification) - [Collaboration (3)](https://info.adaptivedge.com/blog/tag/collaboration) - [Data (3)](https://info.adaptivedge.com/blog/tag/data) - [E5 (3)](https://info.adaptivedge.com/blog/tag/e5) - [Education (3)](https://info.adaptivedge.com/blog/tag/education) - [IaaS (3)](https://info.adaptivedge.com/blog/tag/iaas) - [Labels (3)](https://info.adaptivedge.com/blog/tag/labels) - [PaaS (3)](https://info.adaptivedge.com/blog/tag/paas) - [Power BI (3)](https://info.adaptivedge.com/blog/tag/power-bi) - [Remote Workforce (3)](https://info.adaptivedge.com/blog/tag/remote-workforce) - [SCCM (3)](https://info.adaptivedge.com/blog/tag/sccm) - [SQL (3)](https://info.adaptivedge.com/blog/tag/sql) - [Search (3)](https://info.adaptivedge.com/blog/tag/search) - [Storage (3)](https://info.adaptivedge.com/blog/tag/storage) - [identity management (3)](https://info.adaptivedge.com/blog/tag/identity-management) - [AI & Copilot (2)](https://info.adaptivedge.com/blog/tag/ai-copilot) - [API (2)](https://info.adaptivedge.com/blog/tag/api) - [Autmoation (2)](https://info.adaptivedge.com/blog/tag/autmoation) - [Azure AD (2)](https://info.adaptivedge.com/blog/tag/azure-ad) - [BI (2)](https://info.adaptivedge.com/blog/tag/bi) - [Backup & Recovery (2)](https://info.adaptivedge.com/blog/tag/backup-recovery) - [Copilot Cowork (2)](https://info.adaptivedge.com/blog/tag/copilot-cowork) - [GitHub (2)](https://info.adaptivedge.com/blog/tag/github) - [IT Administration (2)](https://info.adaptivedge.com/blog/tag/it-administration) - [Intune (2)](https://info.adaptivedge.com/blog/tag/intune) - [Microsoft 365 Updates (2)](https://info.adaptivedge.com/blog/tag/microsoft-365-updates) - [Microsoft Dynamics (2)](https://info.adaptivedge.com/blog/tag/microsoft-dynamics) - [Microsoft Graph (2)](https://info.adaptivedge.com/blog/tag/microsoft-graph) - [PAWS (2)](https://info.adaptivedge.com/blog/tag/paws) - [People Analytics (2)](https://info.adaptivedge.com/blog/tag/people-analytics) - [Performance (2)](https://info.adaptivedge.com/blog/tag/performance) - [SKU (2)](https://info.adaptivedge.com/blog/tag/sku) - [Safety (2)](https://info.adaptivedge.com/blog/tag/safety) - [Security & Compliance (2)](https://info.adaptivedge.com/blog/tag/security-compliance) - [Server (2)](https://info.adaptivedge.com/blog/tag/server) - [Windows Defender ATP (2)](https://info.adaptivedge.com/blog/tag/windows-defender-atp) - [Workflow Automation (2)](https://info.adaptivedge.com/blog/tag/workflow-automation) - [Zero Trust (2)](https://info.adaptivedge.com/blog/tag/zero-trust) - [copilot studio (2)](https://info.adaptivedge.com/blog/tag/copilot-studio) - [microsoft ignite (2)](https://info.adaptivedge.com/blog/tag/microsoft-ignite) - [Agentic AI (1)](https://info.adaptivedge.com/blog/tag/agentic-ai) - [Artificial Intelligence (1)](https://info.adaptivedge.com/blog/tag/artificial-intelligence) - [Attack Surface (1)](https://info.adaptivedge.com/blog/tag/attack-surface) - [BYOL (1)](https://info.adaptivedge.com/blog/tag/byol) - [Business (1)](https://info.adaptivedge.com/blog/tag/business) - [Business Requirements (1)](https://info.adaptivedge.com/blog/tag/business-requirements) - [CASB (1)](https://info.adaptivedge.com/blog/tag/casb) - [CRM (1)](https://info.adaptivedge.com/blog/tag/crm) - [Cloud Computing (1)](https://info.adaptivedge.com/blog/tag/cloud-computing) - [Coexistence (1)](https://info.adaptivedge.com/blog/tag/coexistence) - [Customer Relationship Management (1)](https://info.adaptivedge.com/blog/tag/customer-relationship-management) - [DBaaS (1)](https://info.adaptivedge.com/blog/tag/dbaas) - [DMZ (1)](https://info.adaptivedge.com/blog/tag/dmz) - [Datacenter (1)](https://info.adaptivedge.com/blog/tag/datacenter) - [ERP (1)](https://info.adaptivedge.com/blog/tag/erp) - [Enterprise Visual Studio (1)](https://info.adaptivedge.com/blog/tag/enterprise-visual-studio) - [Group Writeback (1)](https://info.adaptivedge.com/blog/tag/group-writeback) - [HRSM (1)](https://info.adaptivedge.com/blog/tag/hrsm) - [Hybrid (1)](https://info.adaptivedge.com/blog/tag/hybrid) - [Infrastructure (1)](https://info.adaptivedge.com/blog/tag/infrastructure) - [LAPS (1)](https://info.adaptivedge.com/blog/tag/laps) - [Millennials (1)](https://info.adaptivedge.com/blog/tag/millennials) - [OMS (1)](https://info.adaptivedge.com/blog/tag/oms) - [OSD (1)](https://info.adaptivedge.com/blog/tag/osd) - [Offboarding (1)](https://info.adaptivedge.com/blog/tag/offboarding) - [Office 365 Groups (1)](https://info.adaptivedge.com/blog/tag/office-365-groups) - [PXE (1)](https://info.adaptivedge.com/blog/tag/pxe) - [Payroll (1)](https://info.adaptivedge.com/blog/tag/payroll) - [Performance Reviews (1)](https://info.adaptivedge.com/blog/tag/performance-reviews) - [Recruiting (1)](https://info.adaptivedge.com/blog/tag/recruiting) - [Requirements Gathering (1)](https://info.adaptivedge.com/blog/tag/requirements-gathering) - [SUP (1)](https://info.adaptivedge.com/blog/tag/sup) - [SaaS (1)](https://info.adaptivedge.com/blog/tag/saas) - [Servers (1)](https://info.adaptivedge.com/blog/tag/servers) - [Skype (1)](https://info.adaptivedge.com/blog/tag/skype) - [Succession Planning (1)](https://info.adaptivedge.com/blog/tag/succession-planning) - [TEM (1)](https://info.adaptivedge.com/blog/tag/tem) - [Training and Development (1)](https://info.adaptivedge.com/blog/tag/training-and-development) - [Travel and Expense (1)](https://info.adaptivedge.com/blog/tag/travel-and-expense) - [UEBA (1)](https://info.adaptivedge.com/blog/tag/ueba) - [Unified Groups (1)](https://info.adaptivedge.com/blog/tag/unified-groups) - [UserVoice (1)](https://info.adaptivedge.com/blog/tag/uservoice) - [VM (1)](https://info.adaptivedge.com/blog/tag/vm) - [Virtualization (1)](https://info.adaptivedge.com/blog/tag/virtualization) - [Windows 10 (1)](https://info.adaptivedge.com/blog/tag/windows-10) - [custom scripts (1)](https://info.adaptivedge.com/blog/tag/custom-scripts) - [digital transformation (1)](https://info.adaptivedge.com/blog/tag/digital-transformation) - [disk utilization (1)](https://info.adaptivedge.com/blog/tag/disk-utilization) - [geotagging (1)](https://info.adaptivedge.com/blog/tag/geotagging) - [identity (1)](https://info.adaptivedge.com/blog/tag/identity) - [identity perimeter (1)](https://info.adaptivedge.com/blog/tag/identity-perimeter) - [mobile workforces (1)](https://info.adaptivedge.com/blog/tag/mobile-workforces) - [orchestrator (1)](https://info.adaptivedge.com/blog/tag/orchestrator) - [phishing (1)](https://info.adaptivedge.com/blog/tag/phishing) - [scom (1)](https://info.adaptivedge.com/blog/tag/scom) - [sharing (1)](https://info.adaptivedge.com/blog/tag/sharing) - [software update (1)](https://info.adaptivedge.com/blog/tag/software-update) - [windows automation (1)](https://info.adaptivedge.com/blog/tag/windows-automation) - [windows server (1)](https://info.adaptivedge.com/blog/tag/windows-server) - [workgroup (1)](https://info.adaptivedge.com/blog/tag/workgroup) see all ### OUR COMPANY As a Microsoft Gold Partner, AdaptivEdge helps customers evaluate various product options from a financial perspective as well as from a business and technical perspective. ### LINKS - [Home](http://adaptivedge.com/) - [Company](http://adaptivedge.com/about/) - [Expertise](http://adaptivedge.com/expertise/) - [Services](http://adaptivedge.com/services/) - [News & Events](http://adaptivedge.com/news-events/) - [Blog](http://adaptivedge.com/blog/) - [Contact](http://adaptivedge.com/contact-us/) ### Latest Posts ### SIGN-UP FOR OUR EMAIL LIST Sign-up below for updates about AdaptivEdge today! ### Footer Newsletter - - - Copyright © 2026. AdaptivEdge, LLC. All rights reserved. Designed by [Bound-by Marketing](http://www.boundbymarketing.com)