THis is a security solution that empowers administrators to detect, investigate, and respond to complex threats to their networks. It is an endpoint security platform that identifies and centralizes threat information then sends that information back to Microsoft. With a consolidated archive of threat information, Microsoft will share the information about the threat and make the entire Windows system stronger. It is a unified endpoint security platform for preventative protection, post-breach detection, automated investigation, and response. uses analytics stored in the cloud, provides you with actionable recommendations, each device has its own historical timeline with security events recorded for the past 6 months. sold as part of Windows 10 Enterprise E5 or as part of the Microsoft 365 E5 package.