Microsoft Defender for Endpoint’s https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/evaluation-lab?view=o365-worldwide is growing with a new feature for device renewal, as well as two new simulations!
The evaluation lab is a playground for you to test Microsoft Defender for Endpoint’s defense against test scenarios of your own, as well as various simulations provided by our partners SafeBreach & AttackIQ, without the hassle of setting up a testing environment.
Until now, the evaluation lab provided customers with a limited number of devices. Now, you can renew your lab resources once a month, allowing you to continuously use the evaluation lab for your testing needs. To do this, simply click on the “request for more devices” button, choose your configuration, and submit the request.
When the request is submitted successfully, you will see a green confirmation banner and the date of the last submission.
You can find the status of your request in the “User Actions” tab. Expect the request to be approved shortly.
Now that you have added your new devices, it’s a great time to check out our https://security.microsoft.com/tutorials/simulations for Carbanak and FIN7, as well as Solorigate, provided by SafeBreach!
These simulations allow you to evaluate Microsoft Defender for Endpoint’s detection and protection capabilities against a few of the most prominent threat actors these days.
Carbanak and FIN7 are financially-motivated threat groups, considered to be two of the most successful criminal hacking groups in the world, so much that they were chosen to be the subject of the recent https://www.microsoft.com/security/blog/2021/04/21/mitre-engenuity-attck-evaluation-proves-microsoft-defender-for-endpoint-stops-advanced-attacks-across-platforms/ evaluation.
Solorigate is a supply chain attack utilizing SolarWinds’ popular network management software - SolarWinds® Orion®. This campaign, dubbed “the largest and most sophisticated attack the world has ever seen”, left tens of thousands of organizations vulnerable.
To run these simulations, navigate to the “Tutorials & simulations” section, choose a simulation, and click “run”. Then, in the “Create simulation” side panel, select a device and click on the “Create simulation” button.
To learn more about the simulations, read the simulation documentation:
- https://aka.ms/Evaluation_CarbanakandFin7
- https://aka.ms/Evaluation_SolarwindsSimulation
