3 ms·

Microsoft has been pulling its punches for a long time here. We all thought Sysmon+ETW+WEF would be the death of EDR, yet... nope. Why will this year’s acronym

• Spooky23 5y ago
  That trio is a tool-centric nerd solution. ATP is a fully integrated product, both from a business (E3/E5/etc) and technical solution... for example for O365 mail security it's a much cleaner integration than an appliance solution. Unlike Sysmon/ETW/WEF, the Microsoft rep can sell ATP with incentives during 1 EA cycle, and then sell the M365/E5 bundle with phone, etc in the next. Microsoft's superpower has always been smart bundling strategy.