, the Microsoft Defender for Endpoint (former MDATP) sensor does support and work with various methods of proxied connections, as documented here. A challenging scenario though is when the network uses a forward proxy as a gateway to the Internet. This documentation might help you to monitor connections behind a forward proxy through network events that originate from network protection.