Security

MicrosoftSecurity

Microsoft Defender for Endpoint now stops human-operated attacks on its own

Credit to Author: Rob Lefferts| Date: Wed, 11 Oct 2023 16:00:00 +0000

Today, we’re pleased to announce that Microsoft Defender for Endpoint customers will now be able automatically to disrupt human-operated attacks like ransomware early in the kill chain without needing to deploy any other capabilities. Now, organizations only need to onboard their devices to Defender for Endpoint to start realizing the benefits of attack disruption.

The post Microsoft Defender for Endpoint now stops human-operated attacks on its own appeared first on Microsoft Security Blog.

Read More
MicrosoftSecurity

Automatic disruption of human-operated attacks through containment of compromised user accounts

Credit to Author: Microsoft Threat Intelligence| Date: Wed, 11 Oct 2023 16:00:00 +0000

User containment is a unique and innovative defense mechanism that stops human-operated attacks in their tracks. We’ve added user containment to the automatic attack disruption capability in Microsoft Defender for Endpoint. User containment is automatically triggered by high-fidelity signals and limits attackers’ ability to move laterally within a network regardless of the compromised account’s Active Directory state or privilege level.

The post Automatic disruption of human-operated attacks through containment of compromised user accounts appeared first on Microsoft Security Blog.

Read More