Endpoint security – Page 2 – PossibleThreat Articles

Microsoft Security

CISO series: Lessons learned from the Microsoft SOC—Part 3b: A day in the life

December 23, 2019 0 Comments CISO series, Ciso series page, Endpoint security, Incident Response, lessons learned, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP

Credit to Author: Todd VanderArk| Date: Mon, 23 Dec 2019 17:00:57 +0000

In this next post in our series, we provide insight into a day in the life of our SOC analysts investigating common front door attacks.

The post CISO series: Lessons learned from the Microsoft SOC—Part 3b: A day in the life appeared first on Microsoft Security .

Microsoft Security

Mobile threat defense and intelligence are a core part of cyber defense

December 19, 2019 0 Comments Endpoint security, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Microsoft Intelligent Security Association (MISA), Mobile Security

Credit to Author: Todd VanderArk| Date: Thu, 19 Dec 2019 17:00:32 +0000

To safeguard company assets, organizations need to augment their global cyber defense strategy with mobile threat intelligence.

The post Mobile threat defense and intelligence are a core part of cyber defense appeared first on Microsoft Security .

Microsoft Security

Data science for cybersecurity: A probabilistic time series model for detecting RDP inbound brute force attacks

December 18, 2019 0 Comments AI and machine learning, automation, brute force attack, cybersecurity, data science, Endpoint security, event id 4625, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, microsoft threat experts, probablistic time series model, Remote Desktop Protocol (RDP), Security Intelligence, Threat protection, Windows Security

Credit to Author: Eric Avena| Date: Wed, 18 Dec 2019 18:00:24 +0000

Microsoft Defender ATP data scientists and threat hunters collaborate to use a data science-driven approach to detecting RDP brute force attacks to protect customers against real-world threats.

The post Data science for cybersecurity: A probabilistic time series model for detecting RDP inbound brute force attacks appeared first on Microsoft Security .

Microsoft Security

Multi-stage downloader Trojan sLoad abuses BITS almost exclusively for malicious activities

December 12, 2019 0 Comments alternative protocol, bits, cybersecurity, Endpoint security, living-off-the-land, Microsoft security intelligence, sload

Credit to Author: Eric Avena| Date: Thu, 12 Dec 2019 17:30:26 +0000

Many of today’s threats evolve to incorporate as many living-off-the-land techniques as possible into the attack chain. The PowerShell-based downloader Trojan known as sLoad, however, puts all its bets on BITS. Background Intelligent Transfer Service (BITS) is a component of the Windows operating system that provides an ability to transfer files in an asynchronous and…

The post Multi-stage downloader Trojan sLoad abuses BITS almost exclusively for malicious activities appeared first on Microsoft Security .

Microsoft Security

Improve cyber supply chain risk management with Microsoft Azure

December 9, 2019 0 Comments Azure Security, Endpoint security, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Zero Trust

Credit to Author: Todd VanderArk| Date: Mon, 09 Dec 2019 17:00:03 +0000

To keep government agencies secure in the cloud, we must keep pace and stay ahead of cyber attackers by defending the cyber supply chain with Microsoft Azure.

The post Improve cyber supply chain risk management with Microsoft Azure appeared first on Microsoft Security .

Microsoft Security

Further enhancing security from Microsoft, not just for Microsoft

November 4, 2019 0 Comments Azure Security, Endpoint security, Microsoft Cloud App Security, Microsoft Intelligent Security Association (MISA), Zero Trust

Credit to Author: Todd VanderArk| Date: Mon, 04 Nov 2019 17:00:37 +0000

Today, at the Microsoft Ignite Conference in Orlando, Florida, I’m thrilled to share the significant progress we’re making on delivering endpoint security from Microsoft, not just for Microsoft.

The post Further enhancing security from Microsoft, not just for Microsoft appeared first on Microsoft Security .

Microsoft Security

Microsoft’s 4 principles for an effective security operations center

October 16, 2019 0 Comments AI and machine learning, Azure Security, CISO series, Ciso series page, Endpoint security

Credit to Author: Todd VanderArk| Date: Tue, 15 Oct 2019 16:00:50 +0000

Microsoft Chief Cybersecurity Strategist, Jonathan Trull, outlines four principles any organization can use to improve the effectiveness of its SOC.

The post Microsoft’s 4 principles for an effective security operations center appeared first on Microsoft Security .

Microsoft Security

Guarding against supply chain attacks—Part 1: The big picture

October 16, 2019 0 Comments Cybersecurity policy, Data governance, Endpoint security

Credit to Author: Todd VanderArk| Date: Wed, 16 Oct 2019 16:00:54 +0000

Paying attention to every link in your supply chain is vital to protect your assets from supply chain attacks.

The post Guarding against supply chain attacks—Part 1: The big picture appeared first on Microsoft Security .

Microsoft Security

Microsoft’s 4 principals for an effective security operations center

October 15, 2019 0 Comments AI and machine learning, Azure Security, CISO series, Ciso series page, Endpoint security

Credit to Author: Todd VanderArk| Date: Tue, 15 Oct 2019 16:00:50 +0000

Microsoft Chief Cybersecurity Strategist, Jonathan Trull, outlines four principles any organization can use to improve the effectiveness of its SOC.

The post Microsoft’s 4 principals for an effective security operations center appeared first on Microsoft Security .