{"id":98964,"date":"2021-10-18T12:00:11","date_gmt":"2021-10-18T19:00:11","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?p=98964"},"modified":"2024-09-12T13:49:45","modified_gmt":"2024-09-12T20:49:45","slug":"microsoft-achieves-a-leader-placement-in-forrester-wave-for-xdr","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2021\/10\/18\/microsoft-achieves-a-leader-placement-in-forrester-wave-for-xdr\/","title":{"rendered":"Microsoft achieves a Leader placement in Forrester Wave for XDR"},"content":{"rendered":"

We are excited to share that Microsoft has been named a Leader in The Forrester New Wave\u2122: Extended Detection and Response (XDR), Q4, 2021,1<\/sup>\u00a0receiving one of the highest scores in the strategy category. Microsoft 365 Defender<\/strong><\/a> was rated as \u201cdifferentiated\u201d in seven criteria including detection, investigation, and response, and remediation.<\/p>\n

Forrester notes that \u201cthere is a deep divide in the XDR market between those far along the path and those just starting to deliver on the vision of XDR,” and that of mature providers “combine the best elements of their portfolios, including industry-leading products, to simplify incident response and build targeted, high-efficacy detections.”<\/p>\n

\"Forrester<\/p>\n

The XDR market category recognizes that while endpoint detection and response (EDR) is important, it is insufficient as the only method to protect against evolving threats in 2021. XDR extends EDR<\/a> to include many additional known sources of telemetry including identities, applications, and cloud infrastructure and then uses AI to correlate and prioritize threats.<\/p>\n

Microsoft’s XDR strategy<\/span><\/h2>\n

Microsoft\u2019s strategy for XDR is to create the most comprehensive solution\u2014collecting signals from multi-platform sources including Windows, Linux, iOS, Android, and macOS, and multi-cloud deployments including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP) coupled with built-in AI, automation, and prevention capabilities.<\/p>\n

Microsoft\u2019s approach with our XDR products Microsoft 365 Defender and Azure Defender<\/a> is to simplify and empower the security operations team with a cloud-hosted, integrated experience that maximizes the time defenders spend thwarting attackers. We also provide the best data set while minimizing the time required on lower-impact activities such as integrating and maintaining systems.<\/p>\n

The key to helping security teams is powerful automation to normalize your data, analyzing it, and correlating seemingly unrelated alerts into incidents. AI, playbooks, and automatic remediation help you free up your time to focus on applying your organizational expertise to proactive hunting and prevention.<\/p>\n

There is a narrative in the market led by vendors with either XDR<\/a> or SIEM<\/a> capabilities that one will over time replace the other. Microsoft\u2019s perspective is that customers need the combination of both SIEM and XDR, delivered differently than it has been in the past. Our SIEM, Azure Sentinel<\/a>, compliments our XDR capabilities extending them to any source of data and custom threat intelligence. Azure Sentinel is dependently integrated with our XDR platforms so unique incidents can be shared across tools.<\/p>\n

We are thankful for our customers and partners and the feedback you provide us on how to improve the product. We\u2019re thrilled by the recognition of this placement and dedicated to continuing to deliver innovation to help you defend against threats. We\u2019re continuing to add threat intelligence, always looking for opportunities to further integrate and simplify, pushing the boundaries of AI, and delivering at cloud speed and cloud-scale. Our 8,500 security experts monitor known groups and attack types at all times to provide you with the latest recommendations, mitigations, and prevention strategies. Our broad ecosystem of partners is ready to help.<\/p>\n

Learn more<\/span><\/h2>\n

Watch our Microsoft Mechanics video<\/a> on our integrated SIEM and XDR capabilities, and learn more about our security solutions:<\/p>\n