What is Windows Defender Application Control?

In this blog post, Russell looks at the story behind Windows Defender Application Control in Windows 10.

The post What is Windows Defender Application Control? appeared first on Petri.

Continue reading What is Windows Defender Application Control?

Hunting down Dofoil with Windows Defender ATP

Dofoil is a sophisticated threat that attempted to install coin miner malware on hundreds of thousands of computers in March, 2018. In previous blog posts we detailed how behavior monitoring and machine learning in Windows Defender AV protected custome… Continue reading Hunting down Dofoil with Windows Defender ATP

Now you see me: Exposing fileless malware

Attackers are determined to circumvent security defenses using increasingly sophisticated techniques. Fileless malware boosts the stealth and effectiveness of an attack, and two of last years major ransomware outbreaks (Petya and WannaCry) used fileles… Continue reading Now you see me: Exposing fileless malware

Windows Defender Exploit Guard Replaces EMET in Fall Creators Update

In this Ask the Admin, Russell Smith looks at the technical details of how Windows Defender Exploit Guard will replace the Enhanced Mitigation Experience Toolkit (EMET) in Windows 10.

The post Windows Defender Exploit Guard Replaces EMET in Fall Creators Update appeared first on Petri.

Continue reading Windows Defender Exploit Guard Replaces EMET in Fall Creators Update