Microsoft Defender for Office 365
E56709
Microsoft Defender for Office 365 is a cloud-based email and collaboration security solution that protects Microsoft 365 users from phishing, malware, and other advanced threats.
All labels observed (5)
| Label | Occurrences |
|---|---|
| Microsoft Defender for Office 365 canonical | 9 |
| Microsoft Defender for Office 365 Plan 1 | 2 |
| Microsoft Defender | 1 |
| Microsoft Defender for Office 365 Plan 2 | 1 |
| Office 365 Advanced Threat Protection | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T452086 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Microsoft Defender for Office 365 Context triple: [Microsoft 365, includes, Microsoft Defender for Office 365]
-
A.
Microsoft 365
Microsoft 365 is a subscription-based suite of productivity and collaboration tools that combines Office applications with cloud services, security features, and device management.
-
B.
Windows Defender
Windows Defender is Microsoft's built-in antivirus and anti-malware solution designed to protect Windows systems from viruses, spyware, ransomware, and other security threats in real time.
-
C.
Skype for Business Online
Skype for Business Online was Microsoft's cloud-based enterprise communication and collaboration service that provided messaging, meetings, and voice capabilities before being succeeded by Microsoft Teams.
-
D.
Continuous Diagnostics and Mitigation tools
Continuous Diagnostics and Mitigation tools are cybersecurity solutions that provide ongoing monitoring, vulnerability management, and risk assessment to help organizations strengthen and maintain their security posture.
-
E.
Duo Security
Duo Security is a cybersecurity company best known for its cloud-based multi-factor authentication and zero-trust access solutions.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Microsoft Defender for Office 365 Target entity description: Microsoft Defender for Office 365 is a cloud-based email and collaboration security solution that protects Microsoft 365 users from phishing, malware, and other advanced threats.
-
A.
Microsoft 365
Microsoft 365 is a subscription-based suite of productivity and collaboration tools that combines Office applications with cloud services, security features, and device management.
-
B.
Windows Defender
Windows Defender is Microsoft's built-in antivirus and anti-malware solution designed to protect Windows systems from viruses, spyware, ransomware, and other security threats in real time.
-
C.
Skype for Business Online
Skype for Business Online was Microsoft's cloud-based enterprise communication and collaboration service that provided messaging, meetings, and voice capabilities before being succeeded by Microsoft Teams.
-
D.
Continuous Diagnostics and Mitigation tools
Continuous Diagnostics and Mitigation tools are cybersecurity solutions that provide ongoing monitoring, vulnerability management, and risk assessment to help organizations strengthen and maintain their security posture.
-
E.
Duo Security
Duo Security is a cybersecurity company best known for its cloud-based multi-factor authentication and zero-trust access solutions.
- F. None of above. chosen
Statements (49)
| Predicate | Object |
|---|---|
| instanceOf |
Microsoft 365 security product
ⓘ
cloud-based security service ⓘ email security solution ⓘ |
| accessedVia |
Microsoft 365 Defender
ⓘ
surface form:
Microsoft 365 Defender portal
|
| deploymentModel | cloud-based ⓘ |
| developer | Microsoft ⓘ |
| feature |
Safe Attachments
ⓘ
Safe Links ⓘ URL time-of-click protection ⓘ alert policies ⓘ anti-phishing policies ⓘ attack simulation training ⓘ automated investigation and response ⓘ quarantine management ⓘ real-time detections ⓘ reporting and analytics ⓘ sandboxing of attachments ⓘ security dashboards ⓘ threat intelligence reporting ⓘ threat investigation and response ⓘ user and domain impersonation protection ⓘ |
| formerlyKnownAs |
Microsoft Defender for Office 365
self-linksurface differs
ⓘ
surface form:
Office 365 Advanced Threat Protection
|
| hasEdition |
Plan 1
ⓘ
Plan 2 ⓘ |
| integratesWith |
Exchange Online
ⓘ
Microsoft 365 ⓘ
surface form:
Microsoft 365 Apps
Microsoft Teams ⓘ OneDrive ⓘ
surface form:
OneDrive for Business
SharePoint ⓘ
surface form:
SharePoint Online
|
| partOf |
Microsoft 365
ⓘ
Microsoft Defender for Office 365 self-linksurface differs ⓘ
surface form:
Microsoft Defender
|
| Plan 1Includes |
Safe Attachments
ⓘ
Safe Links ⓘ anti-phishing policies ⓘ |
| Plan 2Includes |
advanced hunting and threat investigation
ⓘ
attack simulation training ⓘ automated investigation and response ⓘ |
| protectsAgainst |
business email compromise
ⓘ
credential phishing ⓘ malware ⓘ phishing ⓘ ransomware ⓘ spam ⓘ spoofing ⓘ zero-day threats ⓘ |
| supports |
policy-based email protection
ⓘ
role-based access control ⓘ |
| targetUser |
enterprise customers
ⓘ
small and medium businesses ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Microsoft Defender for Office 365 Description of subject: Microsoft Defender for Office 365 is a cloud-based email and collaboration security solution that protects Microsoft 365 users from phishing, malware, and other advanced threats.
Referenced by (14)
Full triples — surface form annotated when it differs from this entity's canonical label.
Microsoft Defender for Office 365
→
partOf
→
Microsoft Defender for Office 365
self-linksurface differs
ⓘ
this entity surface form:
Microsoft Defender
Microsoft Defender for Office 365
→
formerlyKnownAs
→
Microsoft Defender for Office 365
self-linksurface differs
ⓘ
this entity surface form:
Office 365 Advanced Threat Protection
this entity surface form:
Microsoft Defender for Office 365 Plan 1
this entity surface form:
Microsoft Defender for Office 365 Plan 1
this entity surface form:
Microsoft Defender for Office 365 Plan 2