Detonating a bad rabbit: Windows Defender Antivirus and layered machine learning defenses

Detonation-based machine learning models in Windows Defender Antivirus protected customers from Bad Rabbit ransomware 14 minutes after the very first infection. Read the details:

https://blogs.technet.microsoft.com/mmpc/2017/12/11/detonating-a-bad-rabbit-windows-defender-antivirus-and-layered-machine-learning-defenses/. Windows Defender ATP customers can see all related events (detections, blocks, etc. ) in their portal, the Windows Defender Security Center.