Many of Microsoft Defender ATP’s next-generation protection engines are built into the client and block majority of threats in real-time.
In the cloud, more advanced protections examine new threats on the fly and integrate signals from multiple sources.
Read about each of these technologies here:
- Inside out: Get to know the advanced technologies at the core of Microsoft Defender ATP next generation protection
https://www.microsoft.com/security/blog/2019/06/24/inside-out-get-to-know-the-advanced-technologies-at-the-core-of-microsoft-defender-atp-next-generation-protection/