| title | FAQs related to Microsoft Defender Experts coverage for servers and cloud workloads | ||
|---|---|---|---|
| ms.reviewer | |||
| description | Frequently asked questions related to server and cloud workload coverage in Microsoft Defender Experts | ||
| ms.service | defender-experts-for-xdr | ||
| ms.author | pauloliveria | ||
| author | poliveria | ||
| ms.localizationpriority | medium | ||
| manager | orspodek | ||
| audience | ITPro | ||
| ms.collection |
|
||
| ms.topic | faq | ||
| ms.custom |
|
||
| search.appverid | met150 | ||
| ms.date | 08/01/2025 |
Applies to:
The following section lists down questions you or your SOC team might have regarding Microsoft Defender Experts coverage for servers and cloud workloads.
| Questions | Answers |
|---|---|
| What does the server and cloud workload coverage add-on mean for the Microsoft Defender Experts service? Can I purchase this coverage only? | The server and cloud coverage service, called Microsoft Defender Experts for Servers and Microsoft Defender Experts for Hunting – Servers, is only available as an add-on to existing Microsoft Defender Experts for XDR and Microsoft Defender Experts for Hunting customers, respectively. To avail of this add-on, you need at least one Defender Experts for XDR or Defender Experts for Hunting license to enable coverage of all your servers in Microsoft Defender for Cloud. |
| Can I configure which servers the Defender Experts will cover? | This add-on service covers all your servers in your tenant that have Defender for Servers protection enabled in Defender for Cloud. |
| Do the Defender Experts investigate all Defender for Servers alerts? | The Defender for Servers plan in Defender for Cloud covers multicloud servers, such as Microsoft Azure, Amazon Web Services, and Google Cloud Platform, provided the Microsoft Defender for Endpoint is installed on the servers. All Defender for Servers P1 and P2 alerts (Detection Source = Microsoft Defender for Servers) are in scope except for DNS alerts due to limited data available for investigation. |
| I only have Microsoft Defender Endpoint. How can I get server coverage? | If you have servers that have Defender for Endpoint deployed on them with a Microsoft Defender for Endpoint for Server license, you can get the server coverage through the Defender Experts for XDR service. The service doesn't cover Microsoft Defender for Cloud workloads. Learn more If you want coverage for servers in Defender for Cloud, you need to avail the Microsoft Defender Experts for Servers or Defender Experts for Hunting - Servers add-on. |
- General information on Defender Experts for XDR service
- General information on Microsoft Defender Experts for Hunting service
[!INCLUDE Microsoft Defender XDR rebranding]