We’re happy to announce a new monthly webinar series called “monthly threat insights”. On the third Wednesday of each month, the Microsoft Defender Threat Intelligence team will dive deep into a selected emerging threat as seen in the threat analytics library available in Microsoft 365 Defender. Using the threat analytics report authored by Microsoft security researchers and analysts, we’ll examine the different facets of the threat: its history, behavior, and detection details, as well as a detailed MITRE ATT&CK framework mapping of attack techniques and recommended mitigations. We will also look at KQL queries you can use in advanced hunting to investigate the threat on your own.
If you use one of the Microsoft Defender products, you will also have access to the full report in the threat analytics page of Microsoft 365 Defender. In this page, you can access the report, see alerts associated with this threat, and determine if you have applicable protections in place.
The first episode was on June 16th and if you couldn't join us, you can now watch the recording: