Discover and read the best of Twitter Threads about #MicrosoftDefenderATP
Most recents (4)
It has never been easier to get started with key Microsoft security tools. There are ninja trainings for:
- Azure Security Center
- Microsoft Defender ATP
- Azure Sentinel
#AzureSecurityCenter #MDATP #MicrosoftDefenderATP #AzureSentinel
- Azure Security Center
- Microsoft Defender ATP
- Azure Sentinel
#AzureSecurityCenter #MDATP #MicrosoftDefenderATP #AzureSentinel
Azure Security Center: techcommunity.microsoft.com/t5/azure-secur…
Microsoft Defender ATP: techcommunity.microsoft.com/t5/microsoft-d…
New blog post: New machine learning protection features in Microsoft Defender ATP’s behavioral blocking and containment capabilities recently protected 100 organizations from a highly targeted credential theft attack microsoft.com/security/blog/…
Behavior-based machine learning identifies suspicious behavior sequences & advanced attack techniques on the client, triggers analysis of process trees by machine learning in the cloud. More on behavioral blocking and containment in #MicrosoftDefenderATP: microsoft.com/security/blog/… 
Performance-optimized classifiers on the client inspect script content & behavior and send metadata on suspicious scripts to the cloud for real-time classification by heavier classifiers, which analyze metadata and decide whether scripts should be blocked microsoft.com/security/blog/…
Get a sneak peek of the new threat hunting capability coming to #MicrosoftThreatProtection, which builds off of the #advancedhunting technology in #MicrosoftDefenderATP to provide the ability to hunt for threats across endpoints and email: msft.social/ZQtqgT
Also in this month's @MicrosoftMTP update: GA of the new identity threat investigation experience, Threat & Vulnerability Management, and the extension of our endpoint security capabilities to macOS. Get all the details here: microsoft.com/security/blog/…
@MicrosoftMTP Microsoft Threat Protection is evolving rapidly. To help keep track, we publish monthly updates. Find all of them here: microsoft.com/security/blog/…
A modified #multibank Brazilian #bankingtrojan is actively #phishing for Mexican banking credentials using an overlay that replicates active online banking pages. Arriving as a link on #tax invoice emails, #MicrosoftDefenderATP detects this trojan as Fuery or Fuerboos.
Interestingly, the trojan lets attackers interact with victims through the fake overlay connected to a C&C server possibly in the malware vector comprobantefiscalsatfolio[.]com.
The email link points to "folio-fiscal242211144 (1).zip", "factura folio-fiscal94077829.zip", or "SERICIOS MULTI GENERALES folio-fiscal660359864.zip", a ZIP that contains comprobantedigital39824a.exe or comprobantefiscal982sat.exe, which downloads the Trojan.
