Defender for Servers: agentless scanning vs MDE extension vs guest attestation

This sheet compares Agentless machine scanning, Defender for Endpoint extension, Guest attestation extension, Machine Configuration extension.

CriterionAgentless machine scanningDefender for Endpoint extensionGuest attestation extensionMachine Configuration extension
ProvidesInventory, vulnerabilities, secrets, malware from disk snapshotsEDR on the machineBoot integrity monitoring for Trusted LaunchGuest OS baseline assessment

The verdict, the full comparison, 3 rules and 3 traps are part of SC-500 access. Unlock SC-500.