Microsoft Defender Vulnerability Management (MDVM) has come a long way and has become an indispensable part of Microsoft Defender for Endpoint (MDE) and the whole Microsoft Defender XDR ecosystem. Apart from common inventories (devices, vulnerabilities, configurations, software etc) Microsoft has introduced MDVM add-on for MDE (included in Defender for Cloud P2) which introduce capabilities similar to super powers, including browser extensions assessments, vulnerable applications blocking end others.

In this session we will go through the capabilities of the MDVM add-on, introducing some KQL queries to help operationalize further the MDVM add-on and assist with some practical ideas of why this extra license might be worth it.