Microsoft XDR Automatic attack disruption just got better. It now takes into account the device role and criticality to preserve key network functionality while protecting the assets.

Plus IP address based containment of undiscovered devices! #XDR

https://techcommunity.microsoft.com/blog/microsoftthreatprotectionblog/automatic-attack-disruption-enhanced-containment-for-critical-assets-and-shadow-/4402157

If you work with any Microsoft Security product #YellowHat is the conference for you.
Technical deep dives, no marketing, and an amazing speaker lineup.

Register today to join the livestream for free on https://yellowhat.live/

New Defender for Endpoint feature just dropped: Aggregated reporting.

This feature seems to bridge a gap of otherwise capped data collected.

Check the supported tables also action types in the docs

#XDR #MDE

https://learn.microsoft.com/en-us/defender-endpoint/aggregated-reporting

Ninjacats assemble. On March 6th '25 there will be the first #YellowHat conference

Free Live Stream or
attend in Amsterdam (very limited)

https://yellowhat.live/