Microsoft Defender can automatically contain compromised user accounts

The “contain user” feature select Microsoft Defender for Endpoint customers have been trying out since November 2022 is now available to a wider pool of organizations, Microsoft has announced. The feature aims to help organizations disrupt human-operated attacks like ransomware, business email compromise and adversary-in-the-middle, which start – more often than not – with compromised user accounts. Microsoft Defender for Endpoint Microsoft Defender for Endpoint is Microsoft’s enterprise extended detection and response (XDR) solution that … More →

The post …

accounts adversary adversary-in-the-middle attacks automation bec scams business business email compromise compromise compromised customers defender disrupt don't miss email email compromise endpoint endpoint security enterprise feature hot stuff human microsoft microsoft defender microsoft defender for endpoint mitm november organizations privileged accounts ransomware select start xdr