Microsoft Defender for Office 365 (Plan 2) (previously Office 365 Advanced Threat Protection (Plan 2)) provides information on security threats using data from various sources that is based on billions of data points from Microsoft global data centers, Office clients, email, user authentications, signals from the Windows and Azure ecosystems and other incidents that impact the Office 365 ecosystem.