Automatic Attack Disruption with Liz Tesch

What if Microsoft Defender not only detected attackers - but also fought back? Richard talks to Liz Tesch about Microsoft Defender Automatic Attack Disruption and Predictive Shielding. Liz talks about how attacks are often detected before the payload executes, but by the time humans can respond, far more damage has been done. Automatic Attack Disruption acts immediately on detection to limit the attacker by locking accounts, restricting access on a compromised server, and more. Predictive Shielding goes a step further by limiting attackers' ability to respond to the disruption by turning off GPO changes, disabling safe mode, and otherwise interfering with the typical actions that attackers take once they know they have been detected. Add AI to the mix, and everything gets more complicated. The black hats are using AI to attack, and Microsoft Defender XDR is using it to defend - the race is on!

Links

Recorded June 29, 2026

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(1057)

Cloudflare Edge Workers with Bob Fornal

What can Cloudflare do for you? While at KCDC in Kansas City, Richard chatted with Bob Fornal about how his organization uses Cloudflare - not just for content delivery or DDoS protection, but also ed...

7 Okt 37min

AI and Penetration Testing with Paula Januszkiewicz

How is artificial intelligence changing cybersecurity and penetration testing? Richard talks to Paula Januszkiewicz about how her team now uses large language models throughout the security workflow, ...

30 Sep 33min

Building Agents with Andrew Connell

Microsoft offers a surprising number of ways to build agents in Microsoft 365. Which one should you choose? Richard talks to Andrew Connell about the evolving Microsoft 365 Copilot landscape and the f...

23 Sep 39min

Patching in 2026 with Susan Bradley

How has patching changed in 2026? Richard chats with patching goddess Susan Bradley about what she's seeing in vendor patches and how they're affecting consumers and businesses. On one hand, you have ...

16 Sep 35min

State of WSUS with Adam Marshall

Windows Server Update Services (WSUS) was deprecated in Sept 2024 - when does it go away? Richard talks to Adam Marshall about how WSUS is still an essential service for Configuration Manager, include...

9 Sep 28min

Reimagining Intranets with Susan Hanley

How does AI change the intranet? Richard chats with Susan Hanley about her work helping organizations build great intranets and how tools like M365 Copilot are changing the intranet. Susan talks about...

2 Sep 36min

Security Features of PowerShell 7 with Mike O'Neill

How secure are your PowerShell scripts? Richard talks to Mike O'Neill about the powerful security features introduced with PowerShell 7.3 and above, including session configuration files and clean blo...

26 Aug 31min