Event banner

The Virtual Ninja Show | Season 5 finale!

Event Ended
Thursday, Oct 12, 2023, 09:00 AM PDT
Online

Event details

The next evolution of automatic attack disruption

 

Our season finale is going in-depth on an innovative, industry-first capability that marks a significant step forward for defenders gaining ground against human-operated attacks. Principal Product Manager Noam Hadash and Principal Security Research Lead Yair Tsarfaty will demo a sophisticated attack being automatically disrupted early in the kill chain and show you how your organization can benefit from this protection that’s only possible with Microsoft 365 Defender.

Inquiries for the product team? Post your questions in advance or anytime during the live broadcast for our experts to answer.This episode will be available on-demand immediately after the completion of the live event. 

 

Thanks so much for joining us this season. We’re already eager to bring you more content! In the meantime, watch all previous Ninja Show episodes on-demand at https://aka.ms/ninjashow.

                                                              Until next time!                                                                        

 

Trevor_Rusher
Updated Dec 27, 2024
Virtual Ninja Show
    • sassdawe's avatar
      sassdawe
      Brass Contributor
      Oct 12, 2023
      How is this new capability coming into play at a cloud-only environment where there is no Active Directory, no servers, nothing, but only Entra ID joined devices?
      • HeikeRitter's avatar
        HeikeRitter
        Icon for Microsoft rankMicrosoft
        Oct 12, 2023
        Hi David! This capability is not depended on Active Directory, and it will still provide protection also for Entra ID joined devices onboarded to Microsoft Defender for Endpoint. "Contain user" also knows how to contain compromised Entra ID user accounts that are attempting to move laterally in the network, including but not limited to, stopping and terminating Remote Desktop sessions.
    • Adrian Amos's avatar
      Adrian Amos
      Copper Contributor
      Oct 12, 2023
      Having "Attack Disruption" events in KQL hunting queries is a great start, but it would be awesome to have these events published to the "Action Center", as well.
    • avanderwalt's avatar
      avanderwalt
      Copper Contributor
      Oct 12, 2023
      Hmmm - just seeing "Video Unavailable". Anything I should do differently or is there a technical issue?
Date and Time
Oct 12, 20239:00 AM - 10:00 AM PDT