Thread by @MsftSecIntel

Machine learning is a key driver in the constant evolution of security technologies at Microsoft. Machine learning allows Microsoft 365 to scale next-gen protection capabilities and enhance cloud-based, real-time blocking of new and unknown threats.

Machine learning classifiers protected customers from the #BadRabbit #ransomware outbreak just 14 minutes after the very first encounter using detonation-based malware classification in the cloud. cloudblogs.microsoft.com/microsoftsecur…

In May, machine learning and behavior-based detection foiled a massive #Dofoil (#SmokeLoader) campaign. Within milliseconds, multiple metadata-based in the cloud started blocking the threat at first sight, protecting more than 400K machines in 12 hours. cloudblogs.microsoft.com/microsoftsecur…

The power of machine learning is that it is scalable and powerful enough to detect noisy, massive campaigns, but also specific enough to detect targeted attacks with very few signals, including social engineering attacks whether limited or large-scale. cloudblogs.microsoft.com/microsoftsecur…

The evolution driven by predictive technologies, machine learning, applied science, and artificial intelligence helps Windows Defender AV to repeatedly earn top scores in independent tests. cloudblogs.microsoft.com/microsoftsecur…

Machine learning also powers Office 365 ATP to detect malicious attachments in social engineering email campaigns. This boosts defense for email, which continues to be one of the primary entry points for credential phishing, targeted attacks, and malware. cloudblogs.microsoft.com/microsoftsecur…

Machine learning technologies in Windows Defender ATP flag and expose threats that would otherwise remain unnoticed amidst the continuous hum of billions of normal events and the inability of traditional sensors to react to unfamiliar and subtle stimuli. cloudblogs.microsoft.com/microsoftsecur…