BloodHound Archives - ThreatsHub Cybersecurity News

Stopping Active Directory attacks and other post-exploitation behavior with AMSI and machine learning

August 27, 2020 TH Author Active Directory attacks, Antimalware Scan Interface (AMSI), behavioral blocking and containment, BloodHound, Cybersecurity, Endpoint security, Kerberoasting, machine learning, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Microsoft security intelligence, post-exploitation, Threat protection

Microsoft Defender ATP leverages AMSI’s visibility into scripts and harnesses the power of machine learning to detect and stop post-exploitation activities that largely rely on scripts.
The post Stopping Active Directory attacks and other post-exploitation behavior with AMSI and machine learning appeared first on Microsoft Security. READ MORE HERE…