Read the walkthrough document provided with each attack scenario. To run any of the provided simulations, you need at least one onboarded device. After running the simulated attacks, you can review how Defender for Endpoint surfaces malicious activity and explore how it enables an efficient response. To do this, you can run controlled attack simulations on a few test devices. You might want to experience Defender for Endpoint before you onboard more than a few devices to the service.
Read: Insights from the MITRE ATT&CK-based evaluation.
Defender for Endpoint demonstrated industry-leading optics and detection capabilities in the recent MITRE evaluation.Learn about the latest enhancements in Microsoft Defender for Endpoint: What's new in Defender for Endpoint?.
