• Latest
  • Trending
  • All
  • News
  • Business
  • Politics
  • Science
  • World
  • Lifestyle
  • Tech
Microsoft Threat Protection: What security and IT admins need to know

Microsoft Describes Advanced Threat Protection Progress, Plans

November 26, 2020
Public preview of Microsoft Defender ATP web content filtering is now free for enterprise users

Microsoft Releases Windows Server 2022 Preview

March 8, 2021
8×8 makes raft of updates to platform

Silverfort Launches Unified Identity Protection Platform for Microsoft Azure Active Directory

March 8, 2021
A moment of reckoning: the need for a strong and global cybersecurity response

Strata Maverics Identity Orchestrator extends Azure AD control to on-premise applications

March 8, 2021
Microsoft To Build New Azure Cloud Data Centers In Greece

Yubico Makes Passwordless Authentication Generally Available for Azure AD Users

March 5, 2021
A moment of reckoning: the need for a strong and global cybersecurity response

Microsoft makes passwordless push in Azure Active Directory

March 5, 2021
Microsoft’s CyberX Acquisition Boosts Security of Azure IoT Lineup

Microsoft Power BI Premium Per User pricing is a game changer

March 4, 2021
How to use Microsoft Sysmon, Azure Sentinel to log security events

Microsoft Releases Azure AD My App and New Risk Detections for Identity Protection into GA

March 4, 2021
8×8 makes raft of updates to platform

BitDam ATP+ protects Office 365 users from unknown threats

March 4, 2021
How to use Microsoft Sysmon, Azure Sentinel to log security events

Cloud Network Engineer – Associate – ATL

March 3, 2021
Microsoft Outlines How To Set Up Windows Virtual Desktop

What’s New in Tufin Orchestration Suite 21-1

March 3, 2021
Innovative solutions for IT workers at home

BitDam Offers Complete Security for Office 365 Email, OneDrive and Teams With The Introduction of BitDam ATP+

March 2, 2021
A moment of reckoning: the need for a strong and global cybersecurity response

Microsoft to add new shared channels, encryption for calls, webinar features to Teams

March 2, 2021
  • About
  • Advertise
  • Privacy & Policy
  • Contact
Tuesday, March 9, 2021
  • Login
Azure Security News
  • Home
    • Home – Layout 1
    • Home – Layout 2
    • Home – Layout 3
    • Home – Layout 4
    • Home – Layout 5
  • News
    • All
    • Business
    • Politics
    • Science
    • World
    8×8 makes raft of updates to platform

    Silverfort Launches Unified Identity Protection Platform for Microsoft Azure Active Directory

    A moment of reckoning: the need for a strong and global cybersecurity response

    Strata Maverics Identity Orchestrator extends Azure AD control to on-premise applications

    Microsoft To Build New Azure Cloud Data Centers In Greece

    Yubico Makes Passwordless Authentication Generally Available for Azure AD Users

    A moment of reckoning: the need for a strong and global cybersecurity response

    Microsoft makes passwordless push in Azure Active Directory

    How to use Microsoft Sysmon, Azure Sentinel to log security events

    Microsoft Releases Azure AD My App and New Risk Detections for Identity Protection into GA

    8×8 makes raft of updates to platform

    BitDam ATP+ protects Office 365 users from unknown threats

    Microsoft Outlines How To Set Up Windows Virtual Desktop

    What’s New in Tufin Orchestration Suite 21-1

    Innovative solutions for IT workers at home

    BitDam Offers Complete Security for Office 365 Email, OneDrive and Teams With The Introduction of BitDam ATP+

    Telecom Provider Migrates Confidently to Microsoft Azure with Fortinet’s Dynamic Cloud Security Solutions

    Cloud Security in Banking Market Next Big Thing | Major Giants- Sophos, Boxcryptor, Microsoft Azure

    How to use Microsoft Sysmon, Azure Sentinel to log security events

    Microsoft Cloud Announces Three New Vertical Cloud Solutions

    Trending Tags

    • Donald Trump
    • Future of News
    • Climate Change
    • Market Stories
    • Election Results
    • Flat Earth
  • Tech
    • All
    • Apps
    • Gear
    • Mobile
    • Startup
    Public preview of Microsoft Defender ATP web content filtering is now free for enterprise users

    Microsoft Releases Windows Server 2022 Preview

    Microsoft’s CyberX Acquisition Boosts Security of Azure IoT Lineup

    Microsoft Power BI Premium Per User pricing is a game changer

    How to use Microsoft Sysmon, Azure Sentinel to log security events

    Cloud Network Engineer – Associate – ATL

    A moment of reckoning: the need for a strong and global cybersecurity response

    Microsoft to add new shared channels, encryption for calls, webinar features to Teams

    Microsoft Declares ‘General Availability’ of Threat Experts Security Service

    Mindware Partners with Cibecs to Help Regional Organizations Manage and Protect Distributed Endpoint Devices and Data

    Microsoft To Build New Azure Cloud Data Centers In Greece

    Enterprise Key Management Solution Market 2021 Industry Growth Analysis, Future Predictions, SWOT Analysis, By Top Players- EMC Corporation Townsend security Hewlett-Packard Enterprise Gemalto N.V. Microsoft Azure Google Thales e-security International Business Machines (IBM) Broadcom

    A moment of reckoning: the need for a strong and global cybersecurity response

    Intel Calls Silicon ‘Greatest Weapon Against Security Threats’

    A moment of reckoning: the need for a strong and global cybersecurity response

    Microsoft Releases Azure Firewall Premium in Public Preview

    Telecom Provider Migrates Confidently to Microsoft Azure with Fortinet’s Dynamic Cloud Security Solutions

    Veeam Backup & Replication 11: Enhanced data management for a multi-cloud environment

    8×8 makes raft of updates to platform

    Advancing the Orchestration of Distributed Edge Applications, ZEDEDA Integrates with Microsoft Azure IoT

    Trending Tags

    • Flat Earth
    • Sillicon Valley
    • Mr. Robot
    • MotoGP 2017
    • Golden Globes
    • Future of News
  • Entertainment
    • All
    • Gaming
    • Movie
    • Music
    • Sports
    Microsoft Flight Simulator Continues to Look Stunning in New Snow Video

    Microsoft Flight Simulator Continues to Look Stunning in New Snow Video

    Meet the woman who’s making consumer boycotts great again

    New campaign wants you to raise funds for abuse victims by ditching the razor

    Twitter tweaks video again, adding view counts for some users

    A beginner’s guide to the legendary Tim Tam biscuit, now available in America

    People are handing out badges at Tube stations to tackle loneliness

    Trump’s H-1B Visa Bill spooks India’s IT companies

    Magical fish basically has the power to conjure its own Patronus

    This Filipino guy channels his inner Miss Universe by strutting in six-inch heels and speedos

    Oil spill off India’s southern coast leaves fisherman stranded, marine life impacted

  • Lifestyle
    • All
    • Fashion
    • Food
    • Health
    • Travel
    Microsoft Seriously Beefs Up Security in Windows Server 2019

    Microsoft Offers More ‘Solorigate’ Advice Using Microsoft 365 Defender Tools

    A moment of reckoning: the need for a strong and global cybersecurity response

    Solar Winds, Office 365 & Shipbuilding…

    Aruba ClearPass Policy Manager Integrates with Microsoft

    Imprivata Expands Collaboration with Microsoft on New Digital Identity Innovations

    Microsoft Seriously Beefs Up Security in Windows Server 2019

    Microsoft Canada’s 10 biggest stories of 2020

    FAA issues new proposed Boeing 737 MAX pilot training procedures

    FAA issues new proposed Boeing 737 MAX pilot training procedures

    AMD breaks revenue records for 2019 and 4Q

    AMD breaks revenue records for 2019 and 4Q

    Microsoft and Analog Devices pair on 3D imaging tech

    Microsoft and Analog Devices pair on 3D imaging tech

    Microsoft is killing off insecure Cloud App Security cipher suites

    Microsoft is killing off insecure Cloud App Security cipher suites

    Rap group call out publication for using their image in place of ‘gang’

    Meet the woman who’s making consumer boycotts great again

    Trending Tags

    • Golden Globes
    • Mr. Robot
    • MotoGP 2017
    • Climate Change
    • Flat Earth
No Result
View All Result
Azure Security News
No Result
View All Result
Home News

Microsoft Describes Advanced Threat Protection Progress, Plans

by AZURE SECURITY NEWS EDITOR
November 26, 2020
in News
0
Microsoft Threat Protection: What security and IT admins need to know
492
SHARES
1.4k
VIEWS
Share on FacebookShare on Twitter

Microsoft’s progress with its various Advanced Threat Protection (ATP) services was a common thread in the myriad security discussions held at the company’s recent Ignite conference.

The company gave a progress report on ATP at the Ignite session, “Advanced Threat Protection for your Office Environment,” which is available here. Microsoft’s ATP solutions are fed by “signals” generated by Microsoft Intelligent Security Graph search technology that’s used across Office 365 solutions. Those ATP solutions include:

  • Exchange Online Protection, a service for filtering spam and malware in e-mails
  • Windows Defender ATP, a post-breach analysis service, with plans for adding auto-remediation capabilities, and
  • Office 365 ATP, an e-mail filtering service for Exchange Server and Exchange Online that adds client protections against malware, bad links and malicious attachments with Safe Links and Safe Attachments features

The Ignite session mostly focused on Exchange Online Protection and Office 365 ATP. Little was said about Windows Defender ATP during the session, but Microsoft will kick off improvements with the release of the Windows 10 “Fall Creators Update,” scheduled for release on Oct. 17, according to an announcement.

Microsoft expects to integrate Windows Defender ATP with Windows Defender Exploit Guard, which aims to reduce the attack surface for applications. Dashboard reporting also will get improved. Windows Defender ATP eventually will provide support for other platforms, including Windows Server 2012 R2 and Windows Server 2016.

The latest ATP addition, announced at Ignite, is an extension of Office 365 ATP protections to SharePoint Online, OneDrive for Business and Microsoft Teams. For SharePoint and OneDrive, the most frequent attack method is the use of anonymous file shares, explained Sumit Malhotra, a principal program manager at Microsoft, during the Ignite session.

Also newly announced last month is the “Azure Advanced Threat Protection for Users” service, which will be at the “limited preview” stage by the end of this month. Microsoft described Azure ATP for Users as a new cloud service for finding “advanced attacks and insider threats” in a network. It profiles user behaviors based on “multiple data sources, network traffic, event logs, VPN data and others” to find potential malicious activity. It also looks for attacker techniques such as “Pass-the-Hash, Golden Ticket and others,” the announcement indicated.

Essentially, Azure ATP for Users is the Microsoft cloud-hosted version of the Microsoft Advanced Threat Analytics product, a premises-based behavioral analysis solution. The Ignite session, which specifically focused on Office 365 protections, didn’t describe Azure ATP for Users.

Last week, though, Hayden Hainsworth, a principal program manager at Microsoft, described an added capability in Microsoft Advanced Threat Analytics. Microsoft can now actively detect attacks when there’s an attempt to steal an organization’s master Kerberos ticket, a capability that Microsoft’s forensics team previously lacked.

ATP Signals Growth
During the Ignite session, the presenters weren’t shy about relating how Microsoft’s ATP services have grown. Microsoft’s ATP service has three times more users than all third-party competitors combined, said Jason Rogers, a principal program manager at Microsoft, during the session. Exchange Online Protection has a 99.9 percent malware catch rate, he added. Microsoft’s ATP services actually trigger or “detonate” potential malware in a safe “sandbox” location to isolate threats, and the latency times associated with those detonations are now down to less than one-minute averages, he added.

The ATP services are bolstered by “strength of signal” from the Microsoft Intelligent Security Graph and Microsoft’s customer base is one of the largest in the world to pull such information, according to Debraj Ghosh, part of the Office 365 product marketing team, during the Ignite session. The service gets its information from the following sources:

  • Over 1 billion Windows devices
  • More than 18 billion scanned Bing Web pages
  • 450 billion Azure user authentications
  • 200-plus global cloud services, and
  • 400 billion monthly analyzed Office 365 e-mails

Toward the end of the session, Ghosh added that “later on, we’ll also be sharing signals from Azure.”

Microsoft’s ATP services are available as add-ons to Office 365 E3 plans, Rogers said. ATP protections are available for any Microsoft product that has a mailbox, either hosted or on premises, he added.

Expansion Plans
This year, Microsoft is planning to modify its sandbox with more phishing-specific quarantines. Microsoft already carries out a billion or more of such detonations per month, Rogers said.

Safe Links, an Office 365 ATP protection against malicious links in e-mails and Office documents, can now protect internal e-mails within an organization, if that’s wanted. Microsoft is expanding Safe Links to protect more Office clients. For instance, it’ll protect Android and iOS Office clients “later this year,” according to a Microsoft announcement last week. In addition, hovering over a link will show the original URL, along with a “protected by Safe Links” message, instead of the current experience, which just shows a lengthy and messy URL. Microsoft expects to roll out that so-called “Native Link Rendering” improvement “in the coming weeks,” according to the announcement.

Safe Attachments, an Office 365 ATP protection against malicious e-mail attachments, is getting better integrated for Windows 10 users. Safe Attachments now gets Windows Defender ATP information, which works with the Windows Defender Antivirus service on Windows 10 clients. Microsoft also now permits end users to view a document that’s being scanned by Safe Attachments, an enhancement that’s now at the preview stage. Users can even edit the documents during the Safe Attachments scan.

The Ignite session offered the following chart showing the overall Office 365 ATP enhancements:

Office 365 Advanced Threat Protection enhancements. (Source: Ignite 2017 session.)

Office 365 Security and Compliance Center
Microsoft is bringing three new reporting features to the Office 365 Security and Compliance Center portal to “empower admins,” according to Dhanas Raju, a principal program manager at Microsoft, during the session. He didn’t indicate availability, but outlined the following coming portal additions:

  • Insights, which shows “proactive recommendations to improve your configuration” (Microsoft offers 30 so far)
  • User-reported messages, which “enable administrators to view and act on end user feedback,” and
  • ATP real-time reports, which provide “visibility into malware and phish campaigns in near real time”

The coming ATP real-time reports capability will be an improvement from the current 24 hours it currently takes to get such information, Raju explained.

Using the portal, IT pros can see the domain from which a phishing attack is coming from. They can block it using the Compliance Center.

Reference: https://rcpmag.com/articles/2017/10/09/microsoft-atp-progress-plans.aspx

Share197Tweet123Share49
AZURE SECURITY NEWS EDITOR

AZURE SECURITY NEWS EDITOR

Related Posts

8×8 makes raft of updates to platform

Silverfort Launches Unified Identity Protection Platform for Microsoft Azure Active Directory

by AZURE SECURITY NEWS EDITOR
March 8, 2021
0

BOSTON & TEL AVIV, Israel--(BUSINESS WIRE)--Silverfort, a unified identity protection company and member of the Microsoft Intelligent Security Association (MISA), announced...

A moment of reckoning: the need for a strong and global cybersecurity response

Strata Maverics Identity Orchestrator extends Azure AD control to on-premise applications

by AZURE SECURITY NEWS EDITOR
March 8, 2021
0

Strata announced at Microsoft Ignite that its Maverics Identity Orchestrator platform for Microsoft Azure Active Directory (Azure AD) enables organizations to migrate applications...

Microsoft To Build New Azure Cloud Data Centers In Greece

Yubico Makes Passwordless Authentication Generally Available for Azure AD Users

by AZURE SECURITY NEWS EDITOR
March 5, 2021
0

Microsoft Azure Active Directory (AD) users can use YubiKeys to log into various applications now that Yubico has announced that its passwordless...

A moment of reckoning: the need for a strong and global cybersecurity response

Microsoft makes passwordless push in Azure Active Directory

by AZURE SECURITY NEWS EDITOR
March 5, 2021
0

During a Microsoft Ignite 2021 session Wednesday titled, "Azure Active Directory: our identity vision and roadmap for strengthening Zero Trust defenses in...

  • Trending
  • Comments
  • Latest
Microsoft’s CyberX Acquisition Boosts Security of Azure IoT Lineup

AZURE DEFAULT RESOURCE GROUP AND DEFAULT WORKSPACE: WHAT ARE THEY?

December 14, 2020
Microsoft Seriously Beefs Up Security in Windows Server 2019

TCS Launches Cloud Exponence on Microsoft Azure

January 21, 2021
Microsoft Launches Host of Security Products in Time for RSA

Microsoft to add two new Microsoft 365 security, compliance bundles to its line-up

November 26, 2020

Lady Gaga Pulled Off One of the Best Halftime Shows Ever

0

Barack Obama’s Now Mainly Focusing on Wearing This Casual Backwards Hat

0

Watch Justin Timberlake’s ‘Cry Me a River’ Come to Life in Mesmerizing Dance

0
Public preview of Microsoft Defender ATP web content filtering is now free for enterprise users

Microsoft Releases Windows Server 2022 Preview

March 8, 2021
8×8 makes raft of updates to platform

Silverfort Launches Unified Identity Protection Platform for Microsoft Azure Active Directory

March 8, 2021
A moment of reckoning: the need for a strong and global cybersecurity response

Strata Maverics Identity Orchestrator extends Azure AD control to on-premise applications

March 8, 2021
Azure Security News

Copyright © 2020 - Azure Security

Navigate Site

  • About
  • Advertise
  • Privacy & Policy
  • Contact

Follow Us

No Result
View All Result
  • Home
  • News
    • Politics
    • Business
    • World
    • Science
  • Entertainment
    • Gaming
    • Music
    • Movie
    • Sports
  • Tech
    • Apps
    • Gear
    • Mobile
    • Startup
  • Lifestyle
    • Food
    • Fashion
    • Health
    • Travel

Copyright © 2020 - Azure Security

Welcome Back!

Login to your account below

Forgotten Password?

Create New Account!

Fill the forms below to register

All fields are required. Log In

Retrieve your password

Please enter your username or email address to reset your password.

Log In