Home
%3CLINGO-SUB%20id%3D%22lingo-sub-770271%22%20slang%3D%22en-US%22%3EMicrosoft%20Defender%20ATP%20Evaluation%20lab%20is%20now%20available%20in%20public%20preview%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-770271%22%20slang%3D%22en-US%22%3E%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%20margin%3A%200px%3B%22%3EConducting%20a%20thorough%20product%20evaluation%20is%20an%20integral%20step%20when%20considering%20any%20product%20or%20solution.%20%3CBR%20style%3D%22box-sizing%3A%20border-box%3B%22%20%2F%3EProof-of-concepts%20(POCs)%20are%20done%20to%20demonstrate%20the%20capabilities%20of%20a%20product%20and%20see%20how%20it%20performs%20under%20certain%20scenarios.%20However%2C%20running%20an%20evaluation%20can%20be%20a%20challenging%20task%20and%20typically%20require%3A%20having%20a%20lab%20of%20devices%2C%20ensuring%20that%20the%20right%20configuration%20settings%20are%20in%20place%2C%20using%20effective%20simulations%2C%20and%20then%20drilling%20down%20into%20the%20relevant%20results.%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%20margin%3A%200px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%20margin%3A%200px%3B%22%3EImagine%20if%20you%20can%20skip%20all%20those%20complexities%20and%20just%20be%20able%20to%20jump%20right%20into%20running%20attack%20simulations%3F%20With%20the%20Microsoft%20Defender%20ATP%20evaluation%20lab%2C%20you%20can%20do%20just%20that!%20Designed%20to%20eliminate%20the%20challenges%20of%20machine%20and%20environment%20configuration%2C%20the%20lab%20enables%20you%20to%20focus%20on%20evaluating%20the%20capabilities%20of%20the%20platform%2C%20running%20simulations%2C%20and%20seeing%20the%20prevention%2C%20detection%2C%20and%20remediation%20features%20in%20action.%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%20margin%3A%200px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIt%20provides%20the%20perfect%20environment%20to%20verify%20the%20practical%20potential%20of%20the%20platform%20and%20learn%20about%20new%20features%2C%20allowing%20security%20experts%20to%20really%20take%20the%20product%20out%20for%20a%20spin.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EUse%20the%20provisioned%20machines%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EThe%20evaluation%20lab%20allows%20you%20to%20create%20up%20to%20three%20machines%20with%20a%20click%20of%20a%20button.%20Each%20machine%20is%20provisioned%20for%20you%20by%20Microsoft%20Defender%20ATP%20and%20is%20available%20for%20all%20your%20testing%20needs%20for%20three%20days.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20won%E2%80%99t%20need%20to%20worry%20about%20setting%20it%20up%20%E2%80%93%20they%E2%80%99ll%20come%20with%20the%20latest%20and%20greatest%20Windows%2010%20installed%2C%20they%E2%80%99ll%20be%20onboarded%20to%20your%20environment%2C%20and%20configured%20with%20all%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Fthreat-protection%2Fmicrosoft-defender-atp%2Fconfigure-machines-security-baseline%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EMicrosoft%20security%20baseline%3C%2FA%3E%3CSPAN%3Esettings%3C%2FSPAN%3Ein%20place%20in%20audit%20mode.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EConnect%20to%20the%20machines%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EYou%E2%80%99ll%20be%20able%20to%20connect%20to%20the%20machines%20via%20RDP%2C%20allowing%20you%20to%20run%20any%20simulation%20you%E2%80%99d%20like%20to%20conduct.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMachines%20come%20pre-installed%20with%20useful%20tools%20such%20as%20Office%2C%20Sysinternals%2C%20Java%20and%20more%2C%20to%20quickly%20get%20you%20up%20and%20running.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAnother%20key%20feature%20of%20the%20environment%20is%20that%20the%20provisioned%20machines%20are%20contained%20in%20their%20own%20virtual%20network%2C%20allowing%20you%20to%20run%20advanced%20simulations%20such%20as%20lateral%20movement%20activities%20with%20no%20worries%20on%20the%20safety%20of%20your%20environment.%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F124205i4FE0A1B2C625CEB3%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22post1.png%22%20title%3D%22post1.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EConduct%20simulations%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3ENot%20sure%20where%20to%20start%3F%20Fret%20not!%20You%20can%20use%20the%20%3CSPAN%20style%3D%22color%3A%20%232b579a%3B%20background%3A%20%23E6E6E6%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fsecuritycenter.windows.com%2Ftutorials%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EDo-it-yourself%20scenarios%3C%2FA%3E%3C%2FSPAN%3Eavailable%20from%20right%20within%20the%20portal.%20They%20provide%20thorough%20guidance%20on%20how%20to%20conduct%20scenario-based%20simulations.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EView%20results%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EEvaluation%20results%20are%20presented%20all%20in%20one%20place.%20The%20lab%20provides%20a%20dashboard%20with%20real-time%20overview%20of%20the%20evaluation%20results%2C%20along%20with%20a%20full%20report%20to%20help%20you%20determine%20how%20the%20capabilities%20performed%20against%20your%20simulations.%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F124207iECA3AAACB4CCB75D%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22post2.png%22%20title%3D%22post2.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22vertical-align%3A%20middle%3B%22%3EFor%20more%20information%2C%20see%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Fthreat-protection%2Fmicrosoft-defender-atp%2Fevaluation-lab%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EMicrosoft%20Defender%20ATP%20Evaluation%20lab%3C%2FA%3E.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-770271%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20style%3D%22display%3A%20inline%20!important%3B%20float%3A%20none%3B%20background-color%3A%20%23ffffff%3B%20color%3A%20%23333333%3B%20cursor%3A%20text%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%22%3EConducting%20a%20thorough%20product%20evaluation%20is%20an%20integral%20step%20when%20considering%20any%20product%20or%20solution.%20%3C%2FSPAN%3E%3CBR%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%22%20%2F%3E%3CSPAN%20style%3D%22display%3A%20inline%20!important%3B%20float%3A%20none%3B%20background-color%3A%20%23ffffff%3B%20color%3A%20%23333333%3B%20cursor%3A%20text%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%22%3EProof-of-concepts%20(POCs)%20are%20done%20to%20demonstrate%20the%20capabilities%20of%20a%20product%20and%20see%20how%20it%20performs%20under%20certain%20scenarios.%20However%2C%20running%20an%20evaluation%20can%20be%20a%20challenging%20task%20and%20typically%20require%3A%20having%20a%20lab%20of%20devices%2C%20ensuring%20that%20the%20right%20configuration%20settings%20are%20in%20place%2C%20using%20effective%20simulations%2C%20and%20then%20drilling%20down%20into%20the%20relevant%20results.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-SUB%20id%3D%22lingo-sub-773634%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Defender%20ATP%20Evaluation%20lab%20is%20now%20available%20in%20public%20preview%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-773634%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EUnable%20to%20connect%20to%20the%20machines%20via%20RDP%20with%20the%20provided%20credentials.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-773842%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Defender%20ATP%20Evaluation%20lab%20is%20now%20available%20in%20public%20preview%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-773842%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F367065%22%20target%3D%22_blank%22%3E%40Rakeshillam%3C%2FA%3E-%20interesting%2C%20we%20don't%20experience%20any%20bugs%20around%20connectivity.%20is%20it%20possibly%20related%20to%20your%20firewall%20settings%20for%20RDP%20ports%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-775429%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Defender%20ATP%20Evaluation%20lab%20is%20now%20available%20in%20public%20preview%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-775429%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F367065%22%20target%3D%22_blank%22%3E%40Rakeshillam%3C%2FA%3EIf%20that's%20not%20the%20problem%2C%2C%20we'll%20appreciate%20your%20help%20with%20better%20investigating%20the%20case.%20Please%20submit%20lab%20feedback%20with%20mail%20address%20so%20we%20can%20contact%20you%20privately.%20thanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-777320%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Defender%20ATP%20Evaluation%20lab%20is%20now%20available%20in%20public%20preview%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-777320%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F73262%22%20target%3D%22_blank%22%3E%40Hadar%20Feldman%3C%2FA%3E%26nbsp%3B%20Feedback%20is%20submitted%20through%20portal%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-777633%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Defender%20ATP%20Evaluation%20lab%20is%20now%20available%20in%20public%20preview%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-777633%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20a%20way%20to%20use%20the%20%22Live%20Response%22%20feature%20in%20these%20labs%20without%20having%20to%20enable%20that%20feature%20across%20our%20environment%3F%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-778564%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Defender%20ATP%20Evaluation%20lab%20is%20now%20available%20in%20public%20preview%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-778564%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F167469%22%20target%3D%22_blank%22%3E%40Vinay%20Varma%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20can%20see%20that%20the%20evaluation%20machines%20are%20running%20Windows%2010%20x64%20Version%201903%20Build%2018362%20and%20I%20was%20able%20to%20use%20Live%20response%20feature%20on%20one%20of%20the%20evaluation%20machines.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-779218%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Defender%20ATP%20Evaluation%20lab%20is%20now%20available%20in%20public%20preview%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-779218%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F367065%22%20target%3D%22_blank%22%3E%40Rakeshillam%3C%2FA%3E%26nbsp%3Bright%2C%20but%20do%20you%20have%20Live%20Response%20enabled%20on%20your%20environments%20tenant%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-779233%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Defender%20ATP%20Evaluation%20lab%20is%20now%20available%20in%20public%20preview%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-779233%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F167469%22%20target%3D%22_blank%22%3E%40Vinay%20Varma%3C%2FA%3EYes%2C%20But%20from%20my%20understanding%20the%20feature%20can%20be%20only%20used%20if%20your%20tenant%20machines%20have%20minimum%20windows%20build%3A%2018323%20I%20think%20what%20you%20looking%20for%20is%20not%20enabling%20the%20live%20response%20feature%20on%20portal%2C%20but%20just%20test%20it%20with%20the%20evaluation%20machines.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-779372%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Defender%20ATP%20Evaluation%20lab%20is%20now%20available%20in%20public%20preview%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-779372%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F367065%22%20target%3D%22_blank%22%3E%40Rakeshillam%3C%2FA%3E%26nbsp%3BRight%2C%20which%20is%20what%20I%20stated%20in%20my%20first%20comment%2Fquestion.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-779843%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Defender%20ATP%20Evaluation%20lab%20is%20now%20available%20in%20public%20preview%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-779843%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20is%20great.%26nbsp%3B%20Testing%20it%20out%20now!%3C%2FP%3E%3C%2FLINGO-BODY%3E
Microsoft

Conducting a thorough product evaluation is an integral step when considering any product or solution.
Proof-of-concepts (POCs) are done to demonstrate the capabilities of a product and see how it performs under certain scenarios. However, running an evaluation can be a challenging task and typically require: having a lab of devices, ensuring that the right configuration settings are in place, using effective simulations, and then drilling down into the relevant results.

 

Imagine if you can skip all those complexities and just be able to jump right into running attack simulations? With the Microsoft Defender ATP evaluation lab, you can do just that! Designed to eliminate the challenges of machine and environment configuration, the lab enables you to focus on evaluating the capabilities of the platform, running simulations, and seeing the prevention, detection, and remediation features in action.

 

It provides the perfect environment to verify the practical potential of the platform and learn about new features, allowing security experts to really take the product out for a spin.

 

Use the provisioned machines

The evaluation lab allows you to create up to three machines with a click of a button. Each machine is provisioned for you by Microsoft Defender ATP and is available for all your testing needs for three days.

 

You won’t need to worry about setting it up – they’ll come with the latest and greatest Windows 10 installed, they’ll be onboarded to your environment, and configured with all the Microsoft security baseline settings in place in audit mode.

 

Connect to the machines

You’ll be able to connect to the machines via RDP, allowing you to run any simulation you’d like to conduct.

 

Machines come pre-installed with useful tools such as Office, Sysinternals, Java and more, to quickly get you up and running.

 

Another key feature of the environment is that the provisioned machines are contained in their own virtual network, allowing you to run advanced simulations such as lateral movement activities with no worries on the safety of your environment.

post1.png

 

Conduct simulations

Not sure where to start? Fret not! You can use the Do-it-yourself scenarios available from right within the portal. They provide thorough guidance on how to conduct scenario-based simulations.

 

View results

Evaluation results are presented all in one place. The lab provides a dashboard with real-time overview of the evaluation results, along with a full report to help you determine how the capabilities performed against your simulations.

post2.png

For more information, see Microsoft Defender ATP Evaluation lab.

10 Comments
Regular Visitor

Unable to connect to the machines via RDP with the provided credentials.

Microsoft

@Rakeshillam - interesting, we don't experience any bugs around connectivity. is it possibly related to your firewall settings for RDP ports?

Microsoft

@Rakeshillam If that's not the problem,, we'll appreciate your help with better investigating the case. Please submit lab feedback with mail address so we can contact you privately. thanks!

Regular Visitor

@Hadar Feldman  Feedback is submitted through portal

 

Thank you !

Regular Visitor

Is there a way to use the "Live Response" feature in these labs without having to enable that feature across our environment?  

Regular Visitor

@Vinay Varma 

 

I can see that the evaluation machines are running Windows 10 x64 Version 1903 Build 18362 and I was able to use Live response feature on one of the evaluation machines.

Regular Visitor

@Rakeshillam right, but do you have Live Response enabled on your environments tenant?

Regular Visitor
@Vinay Varma Yes, But from my understanding the feature can be only used if your tenant machines have minimum windows build: 18323 I think what you looking for is not enabling the live response feature on portal, but just test it with the evaluation machines.
Regular Visitor

@Rakeshillam Right, which is what I stated in my first comment/question.  

Senior Member

This is great.  Testing it out now!