%3CLINGO-SUB%20id%3D%22lingo-sub-140542%22%20slang%3D%22en-US%22%3EDetonating%20a%20bad%20rabbit%3A%20Windows%20Defender%20Antivirus%20and%20layered%20machine%20learning%20defenses%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-140542%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EDetonation-based%20machine%20learning%20models%20in%20Windows%20Defender%20Antivirus%20protected%20customers%20from%20Bad%20Rabbit%20ransomware%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E14%20minutes%20after%20the%20very%20first%20infection.%20Read%20the%20details%3A%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fmmpc%2F2017%2F12%2F11%2Fdetonating-a-bad-rabbit-windows-defender-antivirus-and-layered-machine-learning-defenses%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Fmmpc%2F2017%2F12%2F11%2Fdetonating-a-bad-rabbit-windows-defender-antivirus-and-layered-machine-learning-defenses%2F.%3C%2FA%3E%20Windows%20Defender%20ATP%20customers%20can%20see%20all%20related%20events%20(detections%2C%20blocks%2C%20etc.%20)%20in%20their%20portal%2C%20the%20%3CSPAN%3EWindows%20Defender%20Security%20Center.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Microsoft

Detonation-based machine learning models in Windows Defender Antivirus protected customers from Bad Rabbit ransomware 14 minutes after the very first infection. Read the details:

https://blogs.technet.microsoft.com/mmpc/2017/12/11/detonating-a-bad-rabbit-windows-defender-antivir... Windows Defender ATP customers can see all related events (detections, blocks, etc. ) in their portal, the Windows Defender Security Center.