S01E42 - Advanced Threat Hunting with Microsoft Defender ATP (I.T)

Описание: 00:00 - Intro
01:08 - Microsoft Defender Security Center discussion
07:31 - Live response session demo
12:45 - startupfolders command
16:20 - getfile/fileinfo command
22:22 - Investigate entities on devices using live response
https://docs.microsoft.com/windows/se...
24:50 - Live response command examples
https://docs.microsoft.com/windows/se...
25:22 - remediate command
31:50 - analyze command
35:40 - Timeline
37:17 - Security agents discussion
42:24 - Wrapping up

Visit our websites and social media for more or to get in touch with us

Steve Hosking - Microsoft EM+S MVP
  / onpremcloudguy  
http://steven.hosking.com.au/
https://mvp.microsoft.com/en-us/Publi...
https://github.com/onpremcloudguy

Adam Gross - Microsoft EM MVP
  / adamgrosstx  
https://www.asquaredozen.com
https://github.com/AdamGrossTX
https://mvp.microsoft.com/en-us/Publi...

Ben Reader
  / powers_hell  
https://www.powers-hell.com/
https://github.com/tabs-not-spaces