Discover and read the best of Twitter Threads about #Dofoil
Most recents (2)
Machine learning is a key driver in the constant evolution of security technologies at Microsoft. Machine learning allows Microsoft 365 to scale next-gen protection capabilities and enhance cloud-based, real-time blocking of new and unknown threats.
Machine learning classifiers protected customers from the #BadRabbit #ransomware outbreak just 14 minutes after the very first encounter using detonation-based malware classification in the cloud. cloudblogs.microsoft.com/microsoftsecur…
In May, machine learning and behavior-based detection foiled a massive #Dofoil (#SmokeLoader) campaign. Within milliseconds, multiple metadata-based in the cloud started blocking the threat at first sight, protecting more than 400K machines in 12 hours. cloudblogs.microsoft.com/microsoftsecur…
Advanced hunting is a new powerful query-based search that Windows Defender ATP customers can use to proactively hunt and investigate across the organization. Advanced hunting leverages the rich set of features in Windows Security Center. blogs.windows.com/business/2018/…
We have demonstrated how, for example, Advanced hunting can be used to find and investigate #Dofoil malware, which uses NameCoin servers for C&C. The query can also unearth other threats that abuse NameCoin servers. cloudblogs.microsoft.com/microsoftsecur…
Here are sample Advanced hunting queries for uncovering zero-day Flash exploits, attacks that exploit the Electron framework, enumeration of users/groups for lateral movement vulnerability, and Sticky key attacks: techcommunity.microsoft.com/t5/What-s-New/… 
