Microsoft Defender ATP Archives - ThreatsHub Cybersecurity News

In hot pursuit of elusive threats: AI-driven behavior-based blocking stops attacks in their tracks

October 8, 2019 TH Author AI and machine learning, AMSI paired machine learning, Automation, behavior-based machine learning, behavioral blocking and containment, Cybersecurity, endpoint protection platform, Endpoint security, Microsoft Defender ATP, Microsoft security intelligence, Security Intelligence, threat and malware prevention

Two new machine learning protection features within the behavioral blocking and containment capabilities in Microsoft Defender ATP specialize in detecting threats by analyzing behavior, adding new layers of protection after an attack has started running.
The post In hot pursuit of elusive threats: AI-driven behavior-based blocking stops attacks in their tracks appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Forrester names Microsoft a Leader in 2019 Endpoint Security Suites Wave

October 1, 2019 TH Author Cybersecurity, Microsoft 365, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Microsoft security intelligence, The Forrester Wave Endpoint Security Suites, Windows Security

Microsoft is positioned as a leader in The Forrester Wave™: Endpoint Security Suites, Q3 2019, receiving among the second highest scores in both the strategy and market presence categories.
The post Forrester names Microsoft a Leader in 2019 Endpoint Security Suites Wave appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Automated incident response in Office 365 ATP now generally available

September 9, 2019 TH Author Microsoft Cloud App Security, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Office 365 Security, Phishing, Threat protection

Powerful automation capabilities help improve the effectiveness and efficiency of investigating and responding to Office 365 alerts.
The post Automated incident response in Office 365 ATP now generally available appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Deep learning rises: New methods for detecting malicious PowerShell

September 3, 2019 TH Author AI and machine learning, Cybersecurity, deep learning, Endpoint security, machine learning, Microsoft Defender ATP, Microsoft security intelligence, PowerShell, Security Intelligence, Threat protection

We adopted a deep learning technique that was initially developed for natural language processing and applied to expand Microsoft Defender ATP’s coverage of detecting malicious PowerShell scripts, which continue to be a critical attack vector.
The post Deep learning rises: New methods for detecting malicious PowerShell appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Gartner names Microsoft a Leader in 2019 Endpoint Protection Platforms Magic Quadrant

August 23, 2019 TH Author Cybersecurity, endpoint protection platform (EPP), gartner, Magic Quadrant (MQ), Microsoft Defender ATP, Microsoft security intelligence, Windows Security

Gartner named Microsoft a Leader in the 2019 Gartner Magic Quadrant for Endpoint Protection Platforms, positioned highest in execution.
The post Gartner names Microsoft a Leader in 2019 Endpoint Protection Platforms Magic Quadrant appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

The evolution of Microsoft Threat Protection—July update

July 29, 2019 TH Author Evolution of Microsoft Threat Protection, Evolution of Microsoft Threat Protection page, Microsoft Cloud App Security, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Office 365 Security

Learn about the latest enhancements to Microsoft Threat Protection, the premier solution for securing the modern workplace across identities, endpoints, user data, apps, and infrastructure.
The post The evolution of Microsoft Threat Protection—July update appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

New machine learning model sifts through the good to unearth the bad in evasive malware

July 25, 2019 TH Author AI and machine learning, antivirus, Automation, Cybersecurity, detection evasion, Endpoint security, LockerGoga, machine learning, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Microsoft security intelligence, monotonic models, next generation protection, Windows Defender Antivirus

Most machine learning models are trained on a mix of malicious and clean features. Attackers routinely try to throw these models off balance by stuffing clean features into malware. Monotonic models are resistant against adversarial attacks because they are trained differently: they only look for malicious features. The magic is this: Attackers can’t evade a monotonic model by adding clean features. To evade a monotonic model, an attacker would have to remove malicious features.
The post New machine learning model sifts through the good to unearth the bad in evasive malware appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Dismantling a fileless campaign: Microsoft Defender ATP next-gen protection exposes Astaroth attack

July 8, 2019 TH Author AI and machine learning, Antimalware Scan Interface (AMSI), Astaroth, behavior monitoring, Command-line scanning, Cybersecurity, Endpoint security, Execution stage, fileless, fileless malware, heuristics, Initial access stage, living-off-the-land, Microsoft Defender ATP, Security Intelligence, Threat protection, Windows Defender Antivirus, Windows Security, WMIC

Advanced technologies in Microsoft Defender ATP next-generation protection exposed and defeated a widespread fileless campaign that completely “lived off the land” throughout a complex attack chain that run the info-stealing backdoor Astaroth directly in memory
The post Dismantling a fileless campaign: Microsoft Defender ATP next-gen protection exposes Astaroth attack appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Microsoft’s Threat & Vulnerability Management now helps thousands of customers to discover, prioritize, and remediate vulnerabilities in real time

July 2, 2019 TH Author Cybersecurity, Endpoint security, Microsoft Defender ATP, Security Intelligence, Threat and Vulnerability Management, Threat protection, TVM, Windows Security

Microsoft’s Threat & Vulnerability Management solution is generally available as of June 30! We have been working closely with customers for more than a year to incorporate their real needs and feedback to better address vulnerability management. Our goal is to empower defenders with the tools they need to better protect against evolving threats, and we believe this solution will help provide that additional visibility and agility they need.
The post Microsoft’s Threat & Vulnerability Management now helps thousands of customers to discover, prioritize, and remediate vulnerabilities in real time appeared first on Microsoft Security. READ MORE HERE…

← Previous