Microsoft Defender now auto-isolates compromised accounts

Microsoft Defender for Endpoint now uses automatic attack disruption to isolate compromised user accounts and block lateral movement in hands-on-keyboard attacks with the help of a new 'contain user' capability in public preview. [...]

accounts attack attacks auto automatic block compromised compromised accounts defender disruption endpoint keyboard lateral movement microsoft microsoft defender microsoft defender for endpoint preview public security