Windows Security – Page 2 – PossibleThreat Articles

Credit to Author: Todd VanderArk| Date: Tue, 27 Aug 2019 16:00:04 +0000

Learn how Towne Properties uses Windows Defender Antivirus and Morphisec to protect against advanced memory-based attacks while simplifying operations.

The post Improve security and simplify operations with Windows Defender Antivirus + Morphisec appeared first on Microsoft Security .

Microsoft Security

Gartner names Microsoft a Leader in 2019 Endpoint Protection Platforms Magic Quadrant

August 23, 2019 0 Comments cybersecurity, endpoint protection platform (EPP), Gartner, Magic Quadrant (MQ), Microsoft Defender ATP, Microsoft security intelligence, Windows Security

Credit to Author: Eric Avena| Date: Fri, 23 Aug 2019 16:00:40 +0000

Gartner named Microsoft a Leader in the 2019 Gartner Magic Quadrant for Endpoint Protection Platforms positioned highest in execution

The post Gartner names Microsoft a Leader in 2019 Endpoint Protection Platforms Magic Quadrant appeared first on Microsoft Security .

Microsoft Security

From unstructured data to actionable intelligence: Using machine learning for threat intelligence

August 8, 2019 0 Comments AI and machine learning, automation, cybersecurity, Endpoint security, indicators of compromise (IoC), Machine Learning, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, Security Intelligence, threat intelligence, TTPs, Windows Security

Credit to Author: Eric Avena| Date: Thu, 08 Aug 2019 16:30:12 +0000

Machine learning and natural language processing can automate the processing of unstructured text for insightful, actionable threat intelligence.

The post From unstructured data to actionable intelligence: Using machine learning for threat intelligence appeared first on Microsoft Security .

Microsoft Security

A case study in industry collaboration: Poisoned RDP vulnerability disclosure and response

August 7, 2019 0 Comments CVE-2019-0887, cybersecurity, Endpoint security, Event Tracing for Windows (ETW), Exploit, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, Remote Desktop Protocol (RDP), Security Response, vulnerability, Windows Security

Credit to Author: Eric Avena| Date: Wed, 07 Aug 2019 23:50:25 +0000

Through a cross-company, cross-continent collaboration, we discovered a vulnerability, secured customers, and developed fix, all while learning important lessons that we can share with the industry.

The post A case study in industry collaboration: Poisoned RDP vulnerability disclosure and response appeared first on Microsoft Security .

Microsoft Security

How Windows Defender Antivirus integrates hardware-based system integrity for informed, extensive endpoint protection

July 31, 2019 0 Comments assertion engine, cybersecurity, hardware-based isolation, kernel-mode attacks, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, next generation protection, privilege escalation, runtime attestation, Security Intelligence, Threat protection, token swap, token theft, Windows Defender Antivirus, Windows Security

Credit to Author: Eric Avena| Date: Wed, 31 Jul 2019 16:30:35 +0000

The deep integration of Windows Defender Antivirus with hardware-based isolation capabilities allows the detection of artifacts of attacks that tamper with kernel-mode agents at the hypervisor level.

The post How Windows Defender Antivirus integrates hardware-based system integrity for informed, extensive endpoint protection appeared first on Microsoft Security .

Microsoft Security

Dismantling a fileless campaign: Microsoft Defender ATP’s Antivirus exposes Astaroth attack

July 30, 2019 0 Comments AI and machine learning, Antimalware Scan Interface (AMSI), Astaroth, behavior monitoring, Command-line scanning, cybersecurity, Endpoint security, Execution stage, fileless, fileless malware, heuristics, Initial access stage, living-off-the-land, Microsoft Defender ATP, Microsoft security intelligence, Security Intelligence, Threat protection, Windows Defender Antivirus, Windows Security, WMIC

Credit to Author: Eric Avena| Date: Mon, 08 Jul 2019 16:00:51 +0000

Advanced technologies in Microsoft Defender ATP’s Antivirus exposed and defeated a widespread fileless campaign that completely “lived off the land” throughout a complex attack chain that run the info-stealing backdoor Astaroth directly in memory

The post Dismantling a fileless campaign: Microsoft Defender ATP’s Antivirus exposes Astaroth attack appeared first on Microsoft Security .

Microsoft Security

Dismantling a fileless campaign: Microsoft Defender ATP next-gen protection exposes Astaroth attack

July 24, 2019 0 Comments AI and machine learning, Antimalware Scan Interface (AMSI), Astaroth, behavior monitoring, Command-line scanning, cybersecurity, Endpoint security, Execution stage, fileless, fileless malware, heuristics, Initial access stage, living-off-the-land, Microsoft Defender ATP, Microsoft security intelligence, Security Intelligence, Threat protection, Windows Defender Antivirus, Windows Security, WMIC

Credit to Author: Eric Avena| Date: Mon, 08 Jul 2019 16:00:51 +0000

Advanced technologies in Microsoft Defender ATP next-generation protection exposed and defeated a widespread fileless campaign that completely “lived off the land” throughout a complex attack chain that run the info-stealing backdoor Astaroth directly in memory

The post Dismantling a fileless campaign: Microsoft Defender ATP next-gen protection exposes Astaroth attack appeared first on Microsoft Security .

Microsoft Security

Microsoft Intelligent Security Association welcomes members of the Microsoft Virus Initiative

July 24, 2019 0 Comments Security Intelligence, Threat protection, Windows Security

Credit to Author: Todd VanderArk| Date: Thu, 11 Jul 2019 21:00:51 +0000

Antimalware products play a key role in collaboration to reduce security complexity and deliver better protection to customers.

The post Microsoft Intelligent Security Association welcomes members of the Microsoft Virus Initiative appeared first on Microsoft Security .

Microsoft Security

Delivering major enhancements in Windows Defender Application Control with the Windows 10 May 2019 Update

July 24, 2019 0 Comments application control CSP, cybersecurity, Device Guard, Disabled: Script Enforcement rule option support, Endpoint security, file patrh rules, MDM policy management, Microsoft security intelligence, Security Intelligence, Threat protection, Windows Defender Application Control, Windows Security

Credit to Author: Eric Avena| Date: Mon, 01 Jul 2019 16:25:25 +0000

With the Windows 10 May 2019 Update we delivered several important features for Windows Defender Application Control. Our focus for this release was responding to some longstanding feedback on manageability improvements. We’re excited to introduce new capabilities in Windows Defender Application Control.

The post Delivering major enhancements in Windows Defender Application Control with the Windows 10 May 2019 Update appeared first on Microsoft Security .

Microsoft Security

Microsoft’s Threat & Vulnerability Management now helps thousands of customers to discover, prioritize, and remediate vulnerabilities in real time

July 24, 2019 0 Comments cybersecurity, Endpoint security, Microsoft Defender ATP, Microsoft security intelligence, Security Intelligence, Threat and Vulnerability Management, Threat protection, TVM, Windows Security

Credit to Author: Eric Avena| Date: Tue, 02 Jul 2019 16:00:13 +0000

Microsoft’s Threat & Vulnerability Management solution is generally available!

The post Microsoft’s Threat & Vulnerability Management now helps thousands of customers to discover, prioritize, and remediate vulnerabilities in real time appeared first on Microsoft Security .