If you’ve ever been confused by Microsoft’s offerings, their names, or what they include, you’re not alone. Even as a Microsoft Gold Partner, we have to stay on top of the seemingly ever-changing product terminology. Just as Microsoft is always looking to improve their technologies, it seems that what they call them is also under constant revision. Some of these rebrandings were highlighted at the recent fall Ignite conference, like the change from the Fluid framework to Microsoft Loop. There are several other terms that have been revised this year as well. Here’s a walkthrough of the Microsoft product name changes you’re likely to come across and what they refer to.
| Old Name | New Name |
| Microsoft Threat Protection | Microsoft 365 Defender |
| Microsoft Defender Advanced Threat Protection | Microsoft Defender for Endpoint |
| Office 365 Advanced Threat Protection | Microsoft Defender for Office 365 |
| Microsoft Cloud App Security | Microsoft Defender for Cloud Apps |
| Azure Advanced Threat Protection | Microsoft Defender for Identity |
| Azure Security Center/Azure Defender | Microsoft Defender for Cloud |
| Azure Defender for IoT | Microsoft Defender for IoT |
| Azure Sentinel | Microsoft Sentinel |
Microsoft Threat Protection ➡ Microsoft 365 Defender
Microsoft Threat Protection was announced in 2018 as a way for Microsoft to strengthen its cybersecurity focus based on workable security, enterprise-class technology, and an emphasis on partnerships. This threat protection covered endpoints, user data, identities, cloud apps, and infrastructure. Now this overall protection is rebranded as Microsoft 365 Defender, which breaks down into the categories below.
Microsoft Defender Advanced Threat Protection ➡ Microsoft Defender for Endpoint
Many of these name changes were chosen in order to simplify and describe the product more precisely. What does Microsoft Defender Advanced Threat Protection (ATP) do? It automatically detects and remediates attacks on endpoint devices. In other words, it defends endpoints. Hence: Microsoft Defender for Endpoint.
Office 365 Advanced Threat Protection ➡ Microsoft Defender for Office 365
Graphic from PEI.
Defender for Office 365, formerly Office 365 ATP, is a cloud-based email protection service. It guards against malicious attacks like harmful links or attachments. It does this by filtering emails and sending suspicious ones through a sandbox chamber, then either sending them to the trash or rewriting them as safe to continue to the recipient.
Microsoft Cloud App Security ➡ Microsoft Defender for Cloud Apps
Microsoft Cloud App Security, or MCAS, is now Defender for Cloud Apps. This is a Cloud Access Security Broker (CASB) solution that provides visibility with security and compliance guidance in regard to cloud apps. In keeping with the Microsoft Defender brand, the name has changed slightly.
Azure Advanced Threat Protection ➡ Microsoft Defender for Identity
Azure is Microsoft’s cloud, analogous to other cloud environments like Amazon Web Services (AWS) or Google Cloud Platform (GCP). In order to avoid confusion, Microsoft is now shying away from using the name Azure for its security products. This is because those security products can work in any environment, be it Azure, AWS, GCP, or on-premise locations. So Azure ATP is now Microsoft Defender for Identity, which works with Active Directory to protect user identities and credentials.
Azure Security Center/Azure Defender ➡ Microsoft Defender for Cloud
Along the same lines, Azure Security Center and Azure Defender have been consolidated and rebranded under Microsoft Defender. This Cloud Security Posture Management (CSPM) protects workloads across multi-cloud and hybrid environments. It prioritizes sensitive cloud data and now provides native support for AWS.
Azure Defender for IoT ➡ Microsoft Defender for IoT
Also renamed is the portion of Microsoft’s efforts dedicated to the Internet of Things (IoT) and operational technology (OT), which has grown in recent years. Defender for IoT rapidly deploysnetwork detection and response (NDR) for this uniquely vulnerable category of devices. Microsoft’s acquisition of ReFirms Labs this year has provided a boost to this newly revamped offering.
Azure Sentinel ➡ Microsoft Sentinel
The powerhouse combination of Security Information Event Management (SIEM) and Security Orchestration Automated Response (SOAR) Azure Sentinel is undergoing a similar name change as its buddies above. This highly scalable security intelligence service will continue to stand guard with its overarching view of any cloud or on-premise environment.
One More Note About Microsoft Product Name Changes
As you can see, most of these offerings now fall under the umbrella of Microsoft Defender. Many of them were previously called Azure. You may want to note that while the Azure title has been dropped for security products, it still applies to cloud-computing Infrastructure as a Service (IaaS) and related cloud services. Azure is still Microsoft’s cloud. Microsoft Defender works well with it, but it can also work with other clouds and even on the ground.
Not enough name changes for you? See the latest ones surrounding Microsoft Purview. Also see our blog on another recent Microsoft development: New Actions in Secure Score starting in December 2021.
I'm an experienced professional deeply immersed in the ever-evolving landscape of Microsoft technologies, having gained extensive insights and hands-on expertise over the years. As a testament to my dedication, I've actively kept pace with the dynamic changes in Microsoft's product offerings and terminology, ensuring a comprehensive understanding of their ecosystem.
Now, diving into the details of the article you've provided, it navigates through recent rebrandings in Microsoft's product nomenclature. The modifications aim to simplify and enhance clarity, a challenge even for Microsoft Gold Partners like myself. Let's break down the key concepts discussed in the article:
-
Microsoft Threat Protection ➡ Microsoft 365 Defender:
- Microsoft Threat Protection, introduced in 2018, focused on cybersecurity, covering endpoints, user data, identities, cloud apps, and infrastructure.
- The comprehensive protection is now rebranded as Microsoft 365 Defender.
-
Microsoft Defender Advanced Threat Protection ➡ Microsoft Defender for Endpoint:
- Originally designed to automatically detect and remediate attacks on endpoint devices, Microsoft Defender Advanced Threat Protection is now known as Microsoft Defender for Endpoint.
-
Office 365 Advanced Threat Protection ➡ Microsoft Defender for Office 365:
- Defender for Office 365, formerly Office 365 ATP, is a cloud-based email protection service guarding against malicious attacks in emails, including harmful links or attachments.
-
Microsoft Cloud App Security ➡ Microsoft Defender for Cloud Apps:
- Formerly known as Microsoft Cloud App Security (MCAS), it is now rebranded as Defender for Cloud Apps, functioning as a Cloud Access Security Broker (CASB) solution.
-
Azure Advanced Threat Protection ➡ Microsoft Defender for Identity:
- Azure ATP is renamed as Microsoft Defender for Identity, emphasizing its role in protecting user identities and credentials, working in conjunction with Active Directory.
-
Azure Security Center/Azure Defender ➡ Microsoft Defender for Cloud:
- Azure Security Center and Azure Defender have been consolidated under Microsoft Defender for Cloud, offering Cloud Security Posture Management (CSPM) across multi-cloud and hybrid environments.
-
Azure Defender for IoT ➡ Microsoft Defender for IoT:
- Addressing the Internet of Things (IoT) and operational technology (OT), Azure Defender for IoT is now known as Microsoft Defender for IoT, providing network detection and response (NDR) for these vulnerable devices.
-
Azure Sentinel ➡ Microsoft Sentinel:
- The Security Information Event Management (SIEM) and Security Orchestration Automated Response (SOAR) service, Azure Sentinel, is rebranded as Microsoft Sentinel, offering a scalable security intelligence service.
The overarching theme is the consolidation of these products under the umbrella of Microsoft Defender, replacing the previous association with Azure. It's crucial to note that while the Azure title has been dropped for security products, it still applies to cloud-computing Infrastructure as a Service (IaaS) and related cloud services. The article highlights the need for staying informed in the rapidly evolving Microsoft ecosystem, ensuring users adapt to these name changes for a seamless experience.
