CrowdStrike vs Microsoft Defender

Last updated: December 22, 2022
7
CrowdStrike
CrowdStrike's cloud-native endpoint security platform combines Next-Gen Av, EDR, Threat Intelligence, Threat Hunting, and much more.
22
Microsoft Defender
Microsoft Defender is working to protect your Windows 10 PC by scanning for malicious software. Microsoft Defender uses real-time protection to scan everything you download or run on your PC. It will turn itself off if you install another antivirus app.
CrowdStrike vs Microsoft Defender in our news:

2021. Microsoft launches Defender for Business



Microsoft has introduced Microsoft Defender for Business, a new easy-to-use and cost-effective endpoint security solution that's specially built to bring enterprise-grade endpoint security to businesses with up to 300 employees. Defender for Business elevates security from traditional antivirus to next-generation protection, endpoint detection and response, threat and vulnerability management, and more. It offers simplified configuration and management with intelligent, automated investigation and remediation. Defender for Business helps you to protect against cybersecurity threats including malware and ransomware across Windows, macOS, iOS, and Android devices. It's available as a standalone offering costing $3 per user per month.


2021. CrowdStrike acquires logging startup Humio for $400M



CrowdStrike, a cloud-native cybersecurity company focused on endpoint protection and threat intelligence for enterprises, has announced plans to acquire U.K.-based log analysis and observability startup Humio in a mostly cash deal worth approximately $400 million. Humio emerged as a notable player in the cloud log-management and observability sphere after being founded out of London in 2016 with the native ability to ingest and analyze both unstructured and semi-structured data. The startup had secured more than $30 million in funding from backers like Accel and Dell, with customers including Microsoft and Bloomberg.


2016. Microsoft released Windows Defender Advanced Threat Protection


Windows already ships with built-in antivirus called Windows Defender. Currently, it’s a defensive program that looks at websites and downloads to try and stop you from getting hacked. Unfortunately, in the day and age of social engineering and spear-phishing, antivirus needs to be a little more proactive. The new cloud service Windows Defender Advanced Threat Protection is supposed to be that protection for large, company-wide networks. WDATP move the focus from monitoring individual files to the machine’s behaviour as a whole—rather than searching for the actual virus, it keeps an eye on symptoms. If your machine starts connecting to weird ports or executing unusual PowerShell commands—behavior that’s out of the ordinary for the vast majority of users—WDAPT will flag it to administrators, providing an overview of current and past behavior for admins to look at. Microsoft’s also trying to take advantage of the vast Windows install base to kickstart its antivirus program. Millions of suspicious files found on machines worldwide will be run on the cloud, building a giant centralized database of malicious files, but also malicious behavior.