Defender ATP is closer to an EDR tool, which means it's designed for detection and response teams, not individual users. It'll take more a reporting and context

Defender ATP is closer to an EDR tool, which means it's designed for detection and response teams, not individual users. It'll take more a reporting and contextualizing approach than an av that is typically blocking.