Episode
Microsoft Defender for Endpoint deception
with Heike Ritter, Dean Pickering
We’re diving into another groundbreaking innovation announced at Microsoft Ignite. Microsoft Defender for Endpoint has seamlessly integrated deception as a built-in capability, revolutionizing its Endpoint Detection and Response (EDR) solutions. Returning guest Senior Product Manager Dean Pickering is with us to explain how deception creates an artificial attack surface and deploys AI-generated decoys and lures to captivate and identify adversaries in the early stages of an attack. Join us to learn about high-confidence detections, automatic threat disruption, and upcoming augmented attack disruption capabilities, all without the need for extra deployment or management efforts.
Chapters
- 00:00 - Introduction
- 04:25 - Deception overview
- 06:55 - Demo
- 19:34 - Rules creation guidance
- 21:11 - Demo
- 23:15 - Best recommendations
- 25:23 - Outro
Recommended resources
Connect
- Heike Ritter | Twitter/X: @Heike Ritter
- Dean Pickering | LinkedIn: /in/dean-pickering-896399162/
We’re diving into another groundbreaking innovation announced at Microsoft Ignite. Microsoft Defender for Endpoint has seamlessly integrated deception as a built-in capability, revolutionizing its Endpoint Detection and Response (EDR) solutions. Returning guest Senior Product Manager Dean Pickering is with us to explain how deception creates an artificial attack surface and deploys AI-generated decoys and lures to captivate and identify adversaries in the early stages of an attack. Join us to learn about high-confidence detections, automatic threat disruption, and upcoming augmented attack disruption capabilities, all without the need for extra deployment or management efforts.
Chapters
- 00:00 - Introduction
- 04:25 - Deception overview
- 06:55 - Demo
- 19:34 - Rules creation guidance
- 21:11 - Demo
- 23:15 - Best recommendations
- 25:23 - Outro
Recommended resources
Connect
- Heike Ritter | Twitter/X: @Heike Ritter
- Dean Pickering | LinkedIn: /in/dean-pickering-896399162/
Have feedback? Submit an issue here.