Microsoft security intelligence Archives - Page 15 of 20

Best practices for defending Azure Virtual Machines

October 7, 2020 TH Author Azure Defender, Azure Information Protection, Azure Security, Microsoft security intelligence, Network Security, Secure Score, Security, Security strategies

One of the things that our Detection and Response Team (DART) and Customer Service and Support (CSS) security teams see frequently during investigation of customer incidents are attacks on virtual machines from the internet. This is one area in the cloud security shared responsibility model where customer tenants are responsible for security. Security is a…
The post Best practices for defending Azure Virtual Machines appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Why we invite security researchers to hack Azure Sphere

October 6, 2020 TH Author Azure Security, Cybersecurity, Microsoft security intelligence, Security, Security Intelligence, Security Response, Security strategies, Threat protection

Fighting the security battle so our customers don’t have to IoT devices are becoming more prevalent in almost every aspect of our lives—we will rely on them in our homes, our businesses, as well as our infrastructure. In February, Microsoft announced the general availability of Azure Sphere, an integrated security solution for IoT devices and…
The post Why we invite security researchers to hack Azure Sphere appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Industry-wide partnership on threat-informed defense improves security for all

September 16, 2020 TH Author adversary emulation plan, Center for Threat-Informed Defense, Cybersecurity, FIN6, Microsoft security intelligence, MITRE, MITRE ATT&CK, MITRE Engenuity, TAAL

MITRE Engenuity’s Center for Threat-Informed Defense has published a library of detailed plans for emulating the threat actor FIN6 (which Microsoft tracks as TAAL). Microsoft is proud to be part of this industry-wide collaborative project.
The post Industry-wide partnership on threat-informed defense improves security for all appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Microsoft announces new Project OneFuzz framework, an open source developer tool to find and fix bugs at scale

September 15, 2020 TH Author Azure Security, Cybersecurity, Microsoft security intelligence

We’re excited to release a new tool called OneFuzz, an extensible fuzz testing framework for Azure.
The post Microsoft announces new Project OneFuzz framework, an open source developer tool to find and fix bugs at scale appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Force firmware code to be measured and attested by Secure Launch on Windows 10

September 1, 2020 TH Author Cybersecurity, Dynamic Root of Trust for Measurement (DRTM), Microsoft security intelligence, Secured-core PCs, System Management Mode (SMM) protection

For important security features on Windows to properly do their jobs, the platform’s firmware and hardware must be trustworthy and healthy. Learn about Secure Launch, which leverages the principle of Dynamic Root of Trust for Measurement (DRTM), and System Management Mode (SMM) protection.
The post Force firmware code to be measured and attested by Secure Launch on Windows 10 appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Stopping Active Directory attacks and other post-exploitation behavior with AMSI and machine learning

August 27, 2020 TH Author Active Directory attacks, Antimalware Scan Interface (AMSI), behavioral blocking and containment, BloodHound, Cybersecurity, Endpoint security, Kerberoasting, machine learning, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Microsoft security intelligence, post-exploitation, Threat protection

Microsoft Defender ATP leverages AMSI’s visibility into scripts and harnesses the power of machine learning to detect and stop post-exploitation activities that largely rely on scripts.
The post Stopping Active Directory attacks and other post-exploitation behavior with AMSI and machine learning appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Inside Microsoft Threat Protection: Solving cross-domain security incidents through the power of correlation analytics

July 29, 2020 TH Author Cybersecurity, Microsoft security intelligence, Microsoft Threat Protection

Through deep correlation logic, Microsoft Threat Protection automatically finds links between related signals across domains. It connects related existing alerts and generates additional alerts where suspicious events that could otherwise be missed can be detected.
The post Inside Microsoft Threat Protection: Solving cross-domain security incidents through the power of correlation analytics appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Seeing the big picture: Deep learning-based fusion of behavior signals for threat detection

July 23, 2020 TH Author AI and machine learning, behavior signals, Bondat, Cybersecurity, deep learning, Endpoint security, machine learning, Microsoft Defender ATP, Microsoft security intelligence, Security, Security Intelligence, Threat protection

Learn how we’re using deep learning to build a powerful, high-precision classification model for long sequences of wide-ranging signals occurring at different times.
The post Seeing the big picture: Deep learning-based fusion of behavior signals for threat detection appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Inside Microsoft Threat Protection: Correlating and consolidating attacks into incidents

July 9, 2020 TH Author Cybersecurity, Incidents, Microsoft security intelligence, Microsoft Threat Protection, MTP

The incidents view in Microsoft Threat Protection empowers SOC analysts by automatically fusing attack evidence and providing a consolidated view of an attack chain and affected assets, as well as a single-click remediation with easy-to-read analyst workflows.
The post Inside Microsoft Threat Protection: Correlating and consolidating attacks into incidents appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Introducing Kernel Data Protection, a new platform security technology for preventing data corruption

July 8, 2020 TH Author Cybersecurity, data corruption attacks, KDP, Kernel Data Protection, Microsoft security intelligence, Secured-core PCs, Windows Defender System Guard

Kernel Data Protection (KDP) is a set of APIs that provide the ability to mark some kernel memory as read-only, preventing attackers from ever modifying protected memory.
The post Introducing Kernel Data Protection, a new platform security technology for preventing data corruption appeared first on Microsoft Security. READ MORE HERE…