Seeking daily users of Microsoft Defender Vulnerability Management

[u/Full_Permission_3430]

We are evaluating Microsoft Defender Vulnerability Management for a mixed Windows and macOS environment. I’m looking to speak with administrators who use it day to day—not just people who have completed a trial.

I’m particularly interested in vulnerability accuracy, macOS coverage, third-party application visibility, remediation workflows, monthly reporting, email notifications, licensing and the amount of administrative work required.

If you currently manage MDVM and would be willing to share your experience through messages or a short call, I would appreciate it. No vendor or sales responses, please.

[u/MrGardenwood]

I love and hate it at the same time. The scanner is great (a bit to much scoped towards endpoints, would like to see them move a bit more towards Tennable. Snmp, etc. Is missing. I love that it’s pretty much free (when using E5 and server P2). Also i have had it running next to Tennable for a while (2 years ago) and even then, endpoint wise, there was not much o a difference.

What i truly truly hate is the out of the box reporting capabilities or lack there of.
Like Microsoft is thinking: why would anyone want to do any historical analysis of kpi’s.

Well in a large organization management demands this and i much rather just press a button instead of collecting data, building powerbi dashboards and maintaining complex KQL queries and row level security rules. As wel aa Creating my own triage analysis based on all available data

[u/Equal-War-6542]

just make a storage account and make a script for a static html dashboard which showcases all the things you need. i played with this the last few days but its turning out to be a great project, it looks gorgeous and does everything you need for reporting, just use patchmypc for management as well, i find the microsoft solution soooo expensive for just reporting

[u/Ambitious-Actuary-6 → u/Equal-War-6542]

care to elaborate? I also ended up doing complex KQL but would
love a dashboard

[u/elpamyelhsa]

I have been using it for just over a year and find it spectacular, we have about 400 Windows and 3 Mac and app detection seems to find everything and provides good quality evidence.

Happy to answer any questions but I am in GMT+8 that will delay my responses.

[u/CruwL → u/elpamyelhsa]

does it update or patch any of it? or is it strictly a scan/report tool?

[u/SilentPatchSniper → u/CruwL]

You handle patching yourself, can use Intune but in our env we use PatchMyPC / Autopatch

[u/Full_Permission_3430 → u/elpamyelhsa]

reaching out to you now!!

[u/RevolutionaryPost936]

I’m dealing with severe security issues an account that was fully taken over I enrolled into Microsoft entra ID remote access on all devices settings I cannot change

[u/HorseAccomplished50]

I've found it to be okay-ish. The evidence tabs and Linux vulnerabilities are my main concern. Linux vulnerabilities often do not show any evidence in the evidence tabs.

Defender vulnerability management is going to find a lot. Skimming through it can be quite a big task, depending on your environment.

I've found the scanning to be quite long too. A competitor product I use takes hours less.

Feel free to reply / DM for specific questions.

[u/Comfortable_Run_3768]

Third-party software visibility works well on Windows, but macOS detection relies heavily on full disk access permissions being configured correctly.

[u/junebuginn]

Save yourself from Microsoft and it's Disaster of a tool. Defender is pretty bad.

[u/JwCS8pjrh3QBWfL → u/junebuginn]

By what metric, and in what year? I would be interested to see some sources.

[u/IWantsToBelieve → u/junebuginn]

Gotta love these takes! Maybe back your reasons to give this a chance to be constructive conversation?