Defender for Office 365 P1 plus threat hunting, automated investigation and response, and attack simulation training.
What's included
Curated capability groupings first, then every remaining service plan Microsoft provisions with this SKU — together they're the complete list, nothing is hidden.
| Security |
|---|
| Defender for Office 365 Plan 2 Protects email and collaboration content from phishing, malware, and malicious links via Safe Links and Safe Attachments. Protects mail and collaboration content from phishing and malware: Safe Links, Safe Attachments, and anti-phishing at Plan 1; adds automated investigation/response, attack simulation, and threat hunting at Plan 2. |
| Other service plans |
| Microsoft 365 Defender A unified cross-product incident view and automated investigation/response across the Microsoft Defender security products. |