Microsoft Defender for Endpoint Deep Dive

- Part 1: https://cyberboo.substack.com/p/microsoft-defender-for-endpoint-deep?r=6h4qin

- Part 2: https://cyberboo.substack.com/p/microsoft-defender-for-endpoint-part

- Part 3: https://cyberboo.substack.com/p/microsoft-defender-for-endpoint-part-14d

- Part 4: https://cyberboo.substack.com/p/microsoft-defender-for-endpoint-part-dc3

- Part 5: https://cyberboo.substack.com/p/microsoft-defender-for-endpoint-part-8bb

- Part 6: https://cyberboo.substack.com/p/microsoft-defender-for-endpoint-part-259

#microsoft #defenderforendpoint #kql

Security Management Features di Defender for Endpoint per i Domain Controllers (in Preview)!

https://www.ictpower.it/sicurezza/security-management-features-di-defender-for-endpoint-per-domain-controllers-preview.htm

#CyberSecurity #DefenderForEndpoint #DomainControllers #SecurityManagement #ICTPower

Comprehensive guidance for the Defender community on MDE's capabilities so you know exactly what's available

The v6 update has 15 changes, including:

• New ASR capabilities
• New Defender antivirus capabilities
• New device response actions
• Much more!

Ultimate Comparison of Defender for Endpoint Features by OS - Ru Campbell MVP
https://campbell.scot/feb-2024-ultimate-comparison-of-defender-for-endpoint-features-by-os/

#microsoftdefender #defender #mde #m365 #microsoft365 #defenderforendpoint #edr #xdr #microsoft #blueteam #azure

𝐏𝐫𝐨𝐭𝐞𝐜𝐭 𝐮𝐧𝐦𝐚𝐧𝐚𝐠𝐞𝐝 𝐨𝐫 3𝐫𝐝 𝐩𝐚𝐫𝐭𝐲 𝐌𝐃𝐌 𝐦𝐚𝐧𝐚𝐠𝐞𝐝 𝐢𝐎𝐒/𝐀𝐧𝐝𝐫𝐨𝐢𝐝 𝐝𝐞𝐯𝐢𝐜𝐞𝐬 𝐰𝐢𝐭𝐡 𝐌𝐃𝐄

In this blog post, you will learn how to protect unmanaged (personal) or 3rd party MDM managed iOS and Android devices with Microsoft Defender for Endpoint as your Mobile Threat Defense (MTD) solution.

The solution leverages Intune’s App Protection Policies aka MAM to enforce Device Protection with MDE regardless of the device enrollment state.

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/protect-unmanaged-or-3rd-party-mdm-managed-ios-android-devices/ba-p/4057691

#mde #defender #defenderforendpoint #mtd #mobile #mobileprotection #mobilerhreatdefence #edr #xdr #microsoft #microsoftsecurity #soc #intune #mdm #mam #byod #ios #android #cloudnative

𝐀𝐮𝐠𝐦𝐞𝐧𝐭 𝐲𝐨𝐮𝐫 𝐄𝐃𝐑 𝐰𝐢𝐭𝐡 𝐝𝐞𝐜𝐞𝐩𝐭𝐢𝐨𝐧 𝐭𝐚𝐜𝐭𝐢𝐜𝐬 𝐭𝐨 𝐜𝐚𝐭𝐜𝐡 𝐚𝐝𝐯𝐞𝐫𝐬𝐚𝐫𝐢𝐞𝐬 𝐞𝐚𝐫𝐥𝐲

Deception is now a built-in capability in Microsoft Defender for Endpoint.

Deception in Defender for Endpoint provides customers with:

➡ 𝐇𝐢𝐠𝐡 𝐜𝐨𝐧𝐟𝐢𝐝𝐞𝐧𝐜𝐞 𝐝𝐞𝐭𝐞𝐜𝐭𝐢𝐨𝐧𝐬 𝐚𝐧𝐝 𝐚𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐜 𝐝𝐢𝐬𝐫𝐮𝐩𝐭𝐢𝐨𝐧 𝐨𝐟 𝐭𝐡𝐫𝐞𝐚𝐭𝐬 – Detects human operated lateral movement in the early stages of a cyber-attack and triggers attack disruption to contain the threat.

➡𝐀𝐈-𝐩𝐨𝐰𝐞𝐫𝐞𝐝 𝐠𝐞𝐧𝐞𝐫𝐚𝐭𝐢𝐨𝐧 𝐨𝐟 𝐚𝐮𝐭𝐡𝐞𝐧𝐭𝐢𝐜 𝐝𝐞𝐜𝐨𝐲𝐬 𝐚𝐧𝐝 𝐥𝐮𝐫𝐞𝐬 – Defender for Endpoint uses machine learning to autogenerate and deploy authentic decoys and lures into your network that mirror production assets

➡𝐁𝐮𝐢𝐥𝐭 𝐢𝐧𝐭𝐨 𝐭𝐡𝐞 𝐞𝐱𝐢𝐬𝐭𝐢𝐧𝐠 𝐞𝐧𝐝𝐩𝐨𝐢𝐧𝐭 𝐚𝐠𝐞𝐧𝐭 - no additional deployment or management of sensors on your network.

➡𝐈𝐧𝐭𝐞𝐠𝐫𝐚𝐭𝐞𝐝 𝐢𝐧𝐭𝐨 𝐭𝐡𝐞 𝐗𝐃𝐑 𝐒𝐎𝐂 𝐞𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞 – for easy, end to end investigation of attacks

https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/ignite-news-augment-your-edr-with-deception-tactics-to-catch/ba-p/3982253

#defender #microsoftdefender #mde #xdr #deception #azure #microsoft #microsoftsecurity #soc #ransomware #ai #aisecurity #analyst #defenderforendpoint #cloudnative #cloudsecurity