MDATP u2013 Automatically isolating machines. Microsoft Defender Advanced Threat Protection is an EDR tool, which stands for Endpoint Detection and Response. Today I want to focus on the Response part. ... At least, we can isolate a machine when an alert occurs.