Automatic Attack Disruption with Liz Tesch

What if Microsoft Defender not only detected attackers - but also fought back? Richard talks to Liz Tesch about Microsoft Defender Automatic Attack Disruption and Predictive Shielding. Liz talks about how attacks are often detected before the payload executes, but by the time humans can respond, far more damage has been done. Automatic Attack Disruption acts immediately on detection to limit the attacker by locking accounts, restricting access on a compromised server, and more. Predictive Shielding goes a step further by limiting attackers' ability to respond to the disruption by turning off GPO changes, disabling safe mode, and otherwise interfering with the typical actions that attackers take once they know they have been detected. Add AI to the mix, and everything gets more complicated. The black hats are using AI to attack, and Microsoft Defender XDR is using it to defend - the race is on!

Links

Recorded June 29, 2026

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(1050)

The Content Management System Landscape with Matt Garrepy

What is the state of content management systems today? Richard chats with Matthew Garrepy of CMS Critic about his views on how the CMS market continues to evolve. Matt digs into the build-vs-buy conve...

12 Aug 40min

Ransomware Readiness with Heather Renze

The risk of ransomware is real - are you ready? Richard talks with Heather Renze about her experiences dealing with a ransomware attack and how to get prepared when it happens to you. Heather talks ab...

5 Aug 37min

Azure Virtual Desktop Hybrid with Travis Roberts

More ways to use Azure Virtual Desktop! Richard chats with Travis Roberts about how Azure Virtual Desktop continues to evolve and provides more options for remote users. Travis talks about how AVD gre...

29 Jul 34min

Security Begins at Procurement with Jessie Schofer

Bringing new software or SaaS into your organization is a security risk - how do you assess it? Richard chats with Jessie Schofer about her experiences in HR software acquisition, which led to the cre...

22 Jul 37min

Finding Security Vulnerabilities using AI with Sami Laiho

How are large language models changing the way security vulnerabilities are found? Richard chats with Sami Laiho about the rapidly changing landscape in security exploits. Certain LLM models like Anth...

15 Jul 38min

Implementing Azure Policies with Barbara Forbes

How can Azure Policies help you? While at Techorama in Belgium, Richard sat down with Barbara Forbes to discuss how Azure Policies have evolved and the techniques sysadmins are using to improve securi...

8 Jul 35min

AI-Accelerated Supply Chain Attacks with Mackenzie Jackson

How are supply-chain attacks evolving? Richard chats with Mackenzie Jackson about his work helping companies protect their software supply chains from malware attacks. Mackenzie discusses the vulnerab...

1 Jul 36min