cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Microsoft Defender for Endpoint Blog
Options
7,811

How to migrate advanced hunting to Microsoft 365 Defender

Tali Ash on Jun 02 2021 10:17 AM
Learn how to successfully migrate your advanced hunting queries and processes from the Microsoft Defender Security Cente...
22K

EDR capabilities for macOS have now arrived

Dan Michelson on Dec 04 2019 12:32 PM
We are excited to announce that Microsoft Defender Advanced Threat Protection (ATP) endpoint and detection response (EDR...
35.7K

Advanced hunting data schema changes

Daniel Naim on Dec 03 2019 04:31 AM
Hello there, Hunters! As announced in a previous blog post, we will be making changes to how Advanced hunting will expos...
26.8K

Create custom reports using Microsoft Defender ATP APIs and Power BI

Thorsten Henking on Nov 14 2019 01:03 AM
Typical enterprise security operation teams often rely on dependable reporting visualisations to make critical security ...
9,790

How insights from system attestation and advanced hunting can improve enterprise security

depletionmode on Nov 06 2019 06:10 AM
With System Guard runtime attestation and advanced hunting capabilities in Microsoft Defender ATP, defenders can identif...
28.4K

Hunting for reconnaissance activities using LDAP search filters

Corina Feuerstein on Aug 28 2019 05:00 AM
Attackers are known to use LDAP to gather information about users, machines, and the domain structure. Attackers can the...
21.5K

Advanced hunting updates: USB events, machine-level actions, and schema changes

Daniel Naim on Aug 27 2019 01:29 AM
Hello there, hunters! I’d like to share some of the work we’ve recently completed for advanced hunting on Microsoft Defe...
13.2K

MDATP Monitoring network connection behind forward proxy - Public Preview

Dan Michelson on Jul 16 2019 09:50 PM
MDATP now reveals the real network connections even when running behind a proxy. With this public preview feature, analy...
2,191

Go hunt, join us on GitHub

Tomer Alpert on May 17 2018 02:05 PM
Advanced hunting
6,966

Unleash the Hunter in You

Liza Mash Levin on Mar 19 2018 07:02 AM

Latest Comments

EricInSD
in Troubleshooting mode for Microsoft Defender for Endpoint now in public preview on May 20 2022 01:39 PM
Hi,We have an Intune Endpoint Security/Antivirus Policy that has real-time protection enabled. With this set and Tamper Protection also turned on, the Troubleshooting mode does not allow the admin user to disable real-time protection. Is it safe to remove the AV policy that enables real-time protect...
0 Likes
personabcd1234
in Hunting for reconnaissance activities using LDAP search filters on May 19 2022 12:56 PM
@AusSupport180 Table naming has changed, MiscEvents is now called "DeviceEvents"
0 Likes
mmkholy
in Tamper Protection is now available on macOS on May 19 2022 08:43 AM
@BrechtMo Thank you for your feedback!Enabling Tamper Protection on macOS is now available through an MDM solution such as MEM or JAMF, so when activating it through "Advanced Features" will enable it only on Windows devices.
0 Likes
mmkholy
in Tamper Protection is now available on macOS on May 19 2022 08:22 AM
@wlawn001 Thank you so much for your feedback, and that's a great point that you've brought, indeed we are working on enabling SCID on Tamper Protection for macOS.
0 Likes
Reza_Ameri
in Tamper Protection is now available on macOS on May 19 2022 06:50 AM
This is very valuable feature in Windows and glad to see it in the MacOS too.However, I still advise end users to consider Windows for better in depth protection.
0 Likes