Discover and read the best of Twitter Threads about #AdvancedHunting
Most recents (3)
Get a sneak peek of the new threat hunting capability coming to #MicrosoftThreatProtection, which builds off of the #advancedhunting technology in #MicrosoftDefenderATP to provide the ability to hunt for threats across endpoints and email: msft.social/ZQtqgT 
Also in this month's @MicrosoftMTP update: GA of the new identity threat investigation experience, Threat & Vulnerability Management, and the extension of our endpoint security capabilities to macOS. Get all the details here: microsoft.com/security/blog/…
@MicrosoftMTP Microsoft Threat Protection is evolving rapidly. To help keep track, we publish monthly updates. Find all of them here: microsoft.com/security/blog/…
Discover how effortless it is to proactively hunt for breaches on your network by searching for PowerShell activity using #WindowsDefenderATP #AdvancedHunting. You just might find something intriguing like Invoke-RickAscii. msft.social/9YN1J4
Start using #AdvancedHunting. Here’s how: docs.microsoft.com/en-us/windows/…
Check out sample queries in the Advanced hunting GitHub repository. Contribute your own queries and share ideas with the community! github.com/Microsoft/Wind…
Windows Defender ATP can surface attacks against your #Linux machines, thanks to our sensor partners. Here's a cool video from our partner @ZiftenInc about the recent #DynoRoot exploit #CVE-2018-1111:
Use Windows Defender ATP #AdvancedHunting to find attacks involving #DynoRoot DHCP exploit, which uses CVE-2018-1111 to remotely run arbitrary commands as root on #RedHat Enterprise Linux 6 or 7. Visit our GitHub repo for the query. github.com/Microsoft/Wind…
Here’s the Windows Defender ATP #AdvancedHunting query that finds attacks that use the #DynoRoot DHCP exploit CVE-2018-1111: github.com/Microsoft/Wind…
