The following diagram shows a layer, labeled as DEFENDER, that represents the Microsoft Defender XDR security services. Adding these services to your IT environment helps you to build better defense for your environment. The services in the Defender layer can work with Azure security services. Download a Visio file of this architecture.

The central component of this architecture is Microsoft Sentinel. It consolidates all the logs and alerts that are generated by Azure security services, Microsoft Defender XDR, and Azure Monitor.

Le diagramme suivant montre une couche, étiquetée comme DEFENDER, qui représente les services de sécurité Microsoft Defender XDR. L’ajout de ces services à votre environnement informatique vous aide à créer une meilleure défense pour votre environnement. Les services de la couche Defender peuvent fonctionner avec les services de sécurité Azure. Téléchargez un fichier Visio de cette architecture.

This solution guide shows you how to set up Microsoft extended detection and response (XDR) tools and how to integrate these with Microsoft Sentinel so your organization can respond to and remediate cybersecurity attacks faster.

This table lists the components of Microsoft Defender XDR. This illustration shows the architecture and integration of Microsoft Defender XDR components.

XDR platforms coordinate cyberthreat detection and response across an organization’s entire digital estate. They help quickly stop cyberattacks by seamlessly consolidating various security tools in a single platform, breaking down traditional security silos to enhance cyberthreat protection.

Microsoft Defender XDR contributes to a strong Zero Trust strategy and architecture by providing extended detection and response (XDR).

This practice will maintain any settings and customizations you configure during your pilot for your full deployment. Defender for Identity contributes to a Zero Trust architecture by helping ...

This practice will maintain any settings and customizations you configure during your pilot for your full deployment. Defender for Office 365 contributes to a Zero Trust architecture by helping ...

This practice will maintain any settings and customizations you configure during your pilot for your full deployment. Defender for Office 365 contributes to a Zero Trust architecture by helping ...

Microsoft Defender XDR correlates the signals from all the Microsoft Defender components to provide the full attack story. The following diagram illustrates Microsoft Defender for Endpoint architecture and integrations.

:::image type="content" source="/defender/media/zero-trust/m365-zero-trust-architecture-defender.png" alt-text="Diagram that shows the Microsoft Defender XDR in the Zero Trust architecture." lightbox="/defender/media/zero-trust/m365-zero-tr...

October 21, 2022 - With Microsoft security architecture, you end up just dealing with a single vendor architecture. This means that all the API stitching you would have had to do is no longer necessary. This translates to reduced management and overhead costs. The offering herein is the combination of Microsoft Defender and Sentinel for XDR.

April 13, 2021 - We talked about XDR more widely in a previous blog post about "How Does XDR Fuel the Modern SOC?", but Microsoft Defender XDR was announced at Microsoft Ignite in 2020 as the unified cyber defence platform that encompasses the entire Microsoft security architecture, that is over 40 security tools.

The architecture also includes a CISO dashboard developed by Kloudynet to provide full visibility across all the security products, multiple cloud platforms (Azure, AWS, GCP), and the organization’s security posture. ... Microsoft Defender is offered as, Microsoft 365 Defender for end-user environments and Defender for Cloud for cloud and hybrid infrastructure. ... Microsoft 365 Defender delivers XDR capabilities for identities, endpoints, cloud apps, and emails.

Part 4: Integrate Azure and Microsoft Defender XDR security services

Microsoft Defender XDR is an XDR platform that provides security across your multiplatform endpoints, hybrid identities, email, collaboration tools, and cloud apps. It uses incident-level visibility across the cyberattack chain, automatic cyberattack disruption, and unified security and access management to accelerate responses to sophisticated cyberattacks.

June 25, 2025 - Extended detection and response ... that are designed to deliver intelligent, automated, and integrated security across domains to help defenders connect seemingly disparate alerts and get ahead of attackers....

Accelerate security operations center (SOC) response with incident-level visibility and automatic cyberattack disruption with extended detection and response (XDR).

Orange Cyberdefense offers a Managed Threat Detection Service based on the XDR [extended detection and response] stack of Microsoft365 Defender and our core fusion platform.