E5 adds a new security service called Windows Defender Advanced Threat Protection (ATP). This is a cloud service that takes behavioral data from sensors built into Windows 10 and provides insights, detections and recommended responses. No matter what anti-malware product is installed on a PC, it’s only as good as the known threats it has been designed to block, the ATP service looks at behavior and reduces the impact of a compromise either of a device itself or a user interaction. While this can work with third party anti-malware tools, it can also be used to provide a complete Microsoft security system, effectively allowing replacement of other vendors as designed to integrate with the built-in Windows Defender anti-malware in Windows 10.