Forum Discussion

Ammar Hasayen's avatar
Ammar Hasayen
Iron Contributor
May 31, 2019

Microsoft Defender ATP [Attack Simulation & Investigation] Demos

Hi Community, 

 

If you are new to Microsoft Defender ATP or want to see a series of demos on how the product can help your organization, check out this:

 

 

  • Chuck99's avatar
    Chuck99
    Brass Contributor

    Ammar Hasayen  thank for the info! However, we are facing an issue when running the Simulation #1 when opening the docm file in Word. AMSI is getting in the way. We did "unblock" the file from the properties of the document and even allowed all macros from the Trust Center.

     

    Any idea how to pass that AMSI security message and finalize the simulation?

     

    Thanks!

    Charles

    • Ammar Hasayen's avatar
      Ammar Hasayen
      Iron Contributor

      Chuck99  thanks for your feedback.

       

      Im my demo, I am using the latest Windows 10 machine that is not joined tot he domain and does not have any thing installed on it but Office to open the document. I am not sure I did anything special to make that work.

Resources