[Updated August 2026] MDE Feature Comparison by OS

Tue, 04 Aug 2026 09:00:00 +0100

Three months after the last big refresh, I’ve worked through Microsoft’s Defender documentation again and updated my cross-platform comparison of Microsoft Defender for Endpoint features by operating system.

The big changes relate to AI agent security, ASR minimum version changes, and the Defender deployment tool (DDT).

You can find the updated comparison here:

MDE Feature Comparison by OS

Quick plug

If the comparison is useful and you want to go much deeper, MDE In Depth, 2nd Edition is available now. Paul, Ian, and I cover the architecture, deployment, configuration, investigation, hunting, response, and day-to-day operation of Defender for Endpoint in considerably more detail than I can fit into one comparison table.

[Updated May 2026] MDE Feature Comparison by OS

Tue, 05 May 2026 09:00:00 +0000

Paul, Ian, and I just finished publishing the second edition of MDE In Depth, so to coincide, I’ve refreshed the comparison of MDE features and capabilities by OS type. Long overdue.

At the same time, I’ve migrated my blog from Bluehost + WordPress to a Hugo static site hosted on Azure Static Web Apps. GitHub Copilot made this so straight forward.

One of the nice side effects of moving to this platform (and leveraging GitHub Copilot) is I could finally turn the comparison into something web-based that’s easier to keep updated, nicer to use than Excel/PDFs, and (soon) easier for folks to report corrections against.

Microsoft-Defender on Ru Campbell MVP

[Updated August 2026] MDE Feature Comparison by OS

Quick plug

[Updated May 2026] MDE Feature Comparison by OS