Implementing a Zero Trust strategy after compromise recovery
After a compromise recovery follows what we call a Security Strategic Recovery.
Microsoft Defender Experts
Elevate your security with expert-led services. Learn how to defend against threats, build cyber resilience, and modernize security operations from the experts at Microsoft.
Refine results
Topic
Threat intelligence
Products and services
Publish date
Modernize your Security Operations Center with Microsoft Sentinel
Microsoft Sentinel is a cloud-native SIEM solution powered by AI and automation that delivers intelligent security analytics across your entire enterprise.
-
-
The art and science behind Microsoft threat hunting: Part 1
At Microsoft, we define threat hunting as the practice of actively looking for cyberthreats that have covertly (or not so covertly) penetrated an environment. -
Looking for the ‘Sliver’ lining: Hunting for emerging command-and-control frameworks
Threat actors evade detection by adopting the Sliver command-and-control (C2) framework in intrusion campaigns. -
Connect with Microsoft Security experts at the 2022 Gartner Identity & Access Management Summit
Microsoft speakers at Gartner Identity & Access Management Summit focus on permissions management, infrastructure attacks, and moving to cloud-based identity. Tailored AI insights from Microsoft Security Copilot
Empower your defenders to detect hidden patterns, harden defenses, and respond to incidents faster with generative AI.
-
Microsoft Defender Experts for Hunting proactively hunts threats
Microsoft Defender Experts for Hunting is now generally available. -
How security leaders can help their teams avoid burnout
Maria Markstedter, CEO of Azeria Labs, shares insights on the growing interest in Arm assembly and strategies to help security professionals avoid burnout. -
Why strong security solutions are critical to privacy protection
Former three-term Ontario Information and Privacy Commissioner Ann Cavoukian, Ph. -
Microsoft security experts outline next steps after compromise recovery
A compromise recovery, in general, means that we are implementing several years of work in cybersecurity in only six weeks. Go beyond data protection with Microsoft Purview
Govern, protect, and manage all of your data with Microsoft Purview, comprehensive solutions to help give you better visibility and control.
-
Building a safer world together with our partners—introducing Microsoft Security Experts
Technology alone is not enough to defend against cybercrime. -
Structured threat hunting: One way Microsoft Defender Experts for Hunting prioritizes customer defense
Our approach to threat hunting is designed to evaluate impact and escalate potential threats for investigation, based on how damaging the potential threat would be. -
CRSP: The emergency team fighting cyber attacks beside customers
CRSP is a worldwide team of cybersecurity experts operating in most countries, across all organizations, with deep expertise to secure an environment post-security breach and to help you prevent a breach in the first place. -
Automating threat actor tracking: Understanding attacker behavior for intelligence and contextual alerting
A probabilistic graphical modeling framework used by Microsoft 365 Defender research and intelligence teams for threat actor tracking enables us to quickly predict the likely threat group responsible for an attack, as well as the likely next attack stages.
