Detecting reflective DLL loading with Windows Defender ATP
Today’s attacks put emphasis on leaving little, if any, forensic evidence to maintain stealth and achieve persistence.
SIEM and XDR
Learn how security information and event management (SIEM) and extended detection and response (XDR) help you detect, investigate, and respond to threats across your digital estate.
Refine results
Topic
Products and services
Publish date
-
-
Introducing Windows Defender System Guard runtime attestation
At Microsoft, we want users to be in control of their devices, including knowing the security health of these devices. -
Practical application of artificial intelligence that can transform cybersecurity
There is tremendous opportunity to use AI—particularly machine learning—to improve the efficacy of cybersecurity, the detection of hackers, and even prevent attacks before they occur. -
Making it real—harnessing data gravity to build the next gen SOC
In this post we address the question: “How do we make data gravity a reality in the security operations center (SOC) while we are under increased and constant pressure from motivated threat actors?” -
Windows Defender ATP device risk score exposes new cyberattack, drives Conditional access to protect networks
Several weeks ago, the Windows Defender Advanced Threat Protection (Windows Defender ATP) team uncovered a new cyberattack that targeted several high-profile organizations in the energy and food and beverage sectors in Asia. -
Windows Defender ATP has protections for USB and removable devices
We recommend a layered approach for device control security, which incorporates multiple avenues of protection, including each of the above. -
Helping security professionals do more, better
Learn how Microsoft’s latest security product releases and solutions showcased at RSA are helping security professionals do more, better. -
Building the security operations center of tomorrow—better insights with compound detection
Learn how compound detection can help you apply the law of data gravity and correlate insights across your security platforms. -
Developing connected security solutions
Learn about the Microsoft APIs, services, and communities you can develop to build connected security products and services. -
Ovum recommends Microsoft security to safeguard your hybrid and multi cloud environments
Read why Ovum believes Microsoft 365 and Azure can protect enterprises who use multiple cloud providers. -
The evolution of Microsoft Threat Protection, June update
Learn about new Microsoft Threat Protection capabilities now in public preview. -
The evolution of Microsoft Threat Protection—July update
Learn about the latest enhancements to Microsoft Threat Protection, the premier solution for securing the modern workplace across identities, endpoints, user data, apps, and infrastructure.