behavior-based machine learning Archives - ThreatsHub Cybersecurity News

Insights from one year of tracking a polymorphic threat

November 26, 2019 TH Author behavior monitoring, behavior-based machine learning, behavioral blocking and containment, Cybersecurity, Dexphot, fileless, Microsoft security intelligence, Polymorphic malware

We discovered the polymoprhic threat Dexphot in October 2018. In the months that followed, we closely tracked the threat as attackers upgraded the malware, targeted new processes, and worked around defensive measures. One year’s worth of intelligence helped us gain insight not only into the goals and motivations of Dexphot’s authors, but of cybercriminals in general.
The post Insights from one year of tracking a polymorphic threat appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

In hot pursuit of elusive threats: AI-driven behavior-based blocking stops attacks in their tracks

October 8, 2019 TH Author AI and machine learning, AMSI paired machine learning, Automation, behavior-based machine learning, behavioral blocking and containment, Cybersecurity, endpoint protection platform, Endpoint security, Microsoft Defender ATP, Microsoft security intelligence, Security Intelligence, threat and malware prevention

Two new machine learning protection features within the behavioral blocking and containment capabilities in Microsoft Defender ATP specialize in detecting threats by analyzing behavior, adding new layers of protection after an attack has started running.
The post In hot pursuit of elusive threats: AI-driven behavior-based blocking stops attacks in their tracks appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Inside out: Get to know the advanced technologies at the core of Microsoft Defender ATP next generation protection

June 24, 2019 TH Author AI and machine learning, Antimalware Scan Interface (AMSI), behavior monitoring, behavior-based machine learning, Cybersecurity, Endpoint security, heuristics, machine learning, memory scanning, Microsoft Defender ATP, next-generation protections, Threat protection, Windows Defender Antivirus, Windows Security

While Windows Defender Antivirus makes catching 5 billion threats on devices every month look easy, multiple advanced detection and prevention technologies work under the hood to make this happen. Multiple next-generation protection engines to detect and stop a wide range of threats and attacker techniques at multiple points, providing industry-best detection and blocking capabilities.
The post Inside out: Get to know the advanced technologies at the core of Microsoft Defender ATP next generation protection appeared first on Microsoft Security. READ MORE HERE…