What’s included in Microsoft 365 Defender Plan 2?

Microsoft 365 Defender Plan 2 is an advanced threat protection solution that builds on Plan 1 by offering broader, deeper security capabilities across your Microsoft environment. It includes:

  • Advanced Threat Protection:
    Stops phishing, malware, and zero-day threats across email, Teams, SharePoint, and OneDrive.

  • Threat Investigation Tools:
    Gives security teams access to real-time threat intelligence, advanced hunting, and threat explorer tools.

  • Automated Incident Response (AIR):
    Speeds up response time by automatically investigating and remediating threats.

  • Attack Simulation Training:
    Helps you test and train employees against phishing and other cyberattack scenarios.

  • Cross-Domain Detection and Response (XDR):
    Integrates signals from Defender for Endpoint, Identity, Office 365, and Cloud Apps for comprehensive protection.

  • Campaign Views and Threat Analytics:
    Offers visibility into threat campaigns targeting your organisation.

In terms of licensing, Defender Plan 2 is already included in Microsoft 365 E5, Office 365 E5, or can be purchased as an add-on to Microsoft 365 E3 and other lower-tier plans.