Detonation-based machine learning models in Windows Defender Antivirus protected customers from Bad Rabbit ransomware 14 minutes after the very first infection. Read the details:
https://blogs.technet.microsoft.com/mmpc/2017/12/11/detonating-a-bad-rabbit-windows-defender-antivirus-and-layered-machine-learning-defenses/. Windows Defender ATP customers can see all related events (detections, blocks, etc. ) in their portal, the Windows Defender Security Center.
Published Dec 29, 2017
Version 1.0HeikeRitter
Microsoft
Joined June 21, 2017
Microsoft Defender for Endpoint Blog
When evaluating various solutions, your peers value hearing from people like you who’ve used the product. Review Defender for Endpoint by filling out a Gartner Peer Insights survey and receive a $25 USD gift card (for customers only). Microsoft Privacy Statement