Tamper protection will be turned on for all enterprise customers
Starting last year, to better protect our customers from ransomware attacks we turned on tamper protection by default for all new customers with Defender for Endpoint Plan 2 or Microsoft 365 E5 licenses. To further protect our customers, we are announcing that tamper protection will be turned on for all existing customers, unless it has been explicitly turned off in the Microsoft 365 Defender portal. For customers who haven’t already configured tamper protection, they’ll soon receive a notification stating that it will be turned on in 30 days. For example, public preview customers receive a notification on September 21, 2022 indicating that tamper protection will be turned on 30 days later, on October 24, 2022.
Security Settings Management in Microsoft Defender for Endpoint is now generally available
Microsoft Defender for Endpoint's expanded configuration management capabilities are now generally available. Security Settings Management for Microsoft Defender for Endpoint empowers security teams to configure devices with their desired security settings without needing to deploy and implement additional tools or infrastructure. Made possible with Microsoft Endpoint Manager, organizations have been able to manage antivirus, endpoint detection and response, and firewall policies from a single view for all enlisted devices.
Detecting and remediating command and control attacks at the network layer
Microsoft Defender for Endpoint helps SecOps teams detect network C2 attacks earlier in the attack chain, minimize the spread by rapidly blocking any further attack propagation, and reduce the time it takes to mitigate by easily removing malicious binaries.Discovering internet-facing devices using Microsoft Defender for Endpoint
To help organizations extend their threat protection across internet-facing devices, Microsoft Defender for Endpoint will automatically map and flag onboarded, exposed, devices in the Microsoft 365 Defender portal, providing more context to security teams and deeper insights into device exploitability.
