Detonation-based machine learning models in Windows Defender Antivirus protected customers from Bad Rabbit ransomware 14 minutes after the very first infection. Read the details:
https://blogs.technet.microsoft.com/mmpc/2017/12/11/detonating-a-bad-rabbit-windows-defender-antivir... Windows Defender ATP customers can see all related events (detections, blocks, etc. ) in their portal, the Windows Defender Security Center.
