The latest monthly update from Microsoft Defender XDR is packed with new features and improvements. Dark mode fans will be happy to know that it's now available in the Microsoft Defender portal, making for a more comfortable viewing experience in low-light conditions. There are also new capabilities for incident management, including assigning severity levels to incidents, grouping them together, and using the 'go hunt' feature directly from the attack story graph.
For those looking to customize their security monitoring, custom detection rules can now be created via the Microsoft Graph security API. Meanwhile, there’s a blog post discussing QR code phishing attacks and how Defender Experts track these threats. The team has also launched the Microsoft Defender Experts Ninja Hub filled with resources to help users stay informed about their services.
Microsoft Defender for Endpoint introduces two new ASR rules in public preview aimed at preventing machines from rebooting into Safe Mode and blocking copied or impersonated system tools. For identity protection enthusiasts, there's a new video showcasing ITDR platforms' benefits and updates on alert threshold configurations within Microsoft Defender for Identity.
Device descriptions sourced from Active Directory are now included on device details panes within Microsoft Defender XDR. Lastly, App governance alerts have been enhanced with additional alerts concerning Credential Access and Lateral Movement activities.
To dive deeper into all these updates and learn how they can bolster your organization's cybersecurity posture, check out the full post on https://lnkd.in/edfuWB2f!
Post generated with the help of Azure OpenAI GPT4 🤖
#msftadvocate #M365Defender #DefenderXDR
