Microsoft has taken the coverages of a new ransomware detection functionality for users of its cloud computing platform, Azure.
The tool, the merging detection of doubly for the ransomware, is the result of the collaboration between Azure and the Microsoft Lenifest Intelligence Center (MSTIC), and employs the learning of the machine (ml) to detect actions typically associated with Ransomware activities and alert security teams in time to take remediation. action.
“Once they are detected and correlated once of these ransomware activities, a high severity incident entitled” Multiple alerts possibly related to ransomware activity detected “will be activated in your Azure Sentinel work area,” said Sylvie Liu, Security Program Manager in Microsoft in a blog post.
Liu says that the intention with Fusion is to provide AZURE users with all relevant information through the signal correlation of multiple Microsoft products along with those available in the network and cloud.
Full picture
The increase of ransomware-AS-A-Services providers and the prevalence of ransomware operated by human, has aggravated, not only the scope, but also the sophistication of ransomware attacks, argues Liu.
Building the case of Fusion, Liu argues that with more attackers adopting more stealthy attack vectors to infiltrate and commit their victims, defenders are increasingly difficult to detect attacks on time to prevent them.
By scoring the malicious activity in the stages of “evasion of defense and execution” of an attack, Fusion will give the security teams the opportunity to analyze the suspicious activity and will derive an attack on the nascent stages.
To reduce the number of false positives, Microsoft has designed merger to connect and collect relevant Azure Defender data (Azure Security Center), Microsoft Defender for Endpoint, Microsoft Defend for identity, Microsoft Cloud Application Safety and Azure Sentinel scheduled analytics rules.
“As I investigate and close the merger incidents, we encourage you to provide comments on whether this incident was a true positive positive, benign, or a false positive, along with the details in the comments. Your comment is fundamental to help Microsoft To deliver detections of the highest quality, “Liu Ronds Off.
