Forum Discussion
knowbe4 ransim test failed
We are testing ATP defender for endpoints, we tested with knowbe4 ransim test software and ATP defender failed 20/23 scenarios.
It very well could be a mis-configuration. Has anyone ran this tool? Are there recommended settings for ATP that need to be configured to block all forms of malware?
JayronnMicrosoft
Hi Jason_B1025,
Here are some ransomware articles that may be useful:Protect your PC from ransomware (microsoft.com), Ransomware protection in Windows Security (microsoft.com) and Ransomware detection and recovering your files (microsoft.com).We customize the configuration based on the scenario. It would be helpful to know the configuration that you used during testing that caused failure.Please let me know if this helps answer your question.- Kasia Kaplinska
Hello Jason_B1025 - We have extensive guidance for protecting against ransomware at https://aka.ms/ransomware. I suggest downloading the Human Operated Ransomware Mitigation plan. In it you'll have endpoint specific protection guidelines on slide 14 and detection and response guidance on slide 21.
