cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Microsoft Defender for Endpoint Blog

When evaluating various solutions, your peers value hearing from people like you who’ve used the product. Review Defender for Endpoint by filling out a Gartner Peer Insights survey and receive a $25 USD gift card (for customers only). Microsoft Privacy Statement
Options
23.5K

Demystifying attack surface reduction rules - Part 4

Antonio Vasconcelos on May 13 2020 11:51 AM
An A to Z guide, to help you understand what are Attack Surface Reduction (ASR) rules and how to successfully adopt it.
48.6K

Demystifying attack surface reduction rules - Part 3

Antonio Vasconcelos on May 05 2020 10:52 AM
An A to Z guide, to help you understand what are Attack Surface Reduction (ASR) rules and how to successfully adopt it.
169K

Demystifying attack surface reduction rules - Part 2

Antonio Vasconcelos on Apr 22 2020 08:47 AM
An A to Z guide, to help you understand what are Attack Surface Reduction (ASR) rules and how to successfully adopt it.
272K

Demystifying attack surface reduction rules - Part 1

Antonio Vasconcelos on Apr 14 2020 10:54 AM
An A to Z guide, to help you understand what are Attack Surface Reduction (ASR) rules and how to successfully adopt it.

Latest Comments

MikeP751860
in Detect compromised RDP sessions with Microsoft Defender for Endpoint on Sep 09 2024 04:03 AM
Thanks @SaarCohen, any word on possible detections within Defender XDR for RDP Nesting? Maybe include other detections like rare RDP connection so I can kill off the Sentinel analytic rules 🙂
0 Likes
SaarCohen
in Detect compromised RDP sessions with Microsoft Defender for Endpoint on Sep 09 2024 03:48 AM
@MikeP751860 , we are working on a fix. Please expect this issue to be resolved by the end of September.
0 Likes
smuhammad137
in Become a Microsoft Defender for Endpoint Ninja on Sep 05 2024 08:41 AM
This is one of the finest contributions to the community! The structured approach, with content tailored for both Security Operations (SecOps) and Security Administrators (SecAdmin), is incredibly valuable. The progression from Fundamentals to Expert level, along with the knowledge checks and the en...
0 Likes
MikeP751860
in Detect compromised RDP sessions with Microsoft Defender for Endpoint on Aug 30 2024 06:45 AM
Recently found out the Sentinel Defender XDR connector isn't pulling in the additional fields so anyone RDP Nesting custom rules would need to be in Defender 😞 Wrote this KQL for it but no time to test it yet. (DeviceNetworkEvents| where IsInitiatingProcessRemoteSession == "True" and ActionType has...
0 Likes
HotCakeX
in Microsoft Defender for Endpoint’s Safe Deployment Practices on Aug 16 2024 01:28 AM
Great post, the updating process is very nice and smart tbh. The layered, ring based controlled feature rollout is the way.
4 Likes