Ransomware, extortion, and intrusion defense

Learn how to better protect your organization from ransomware, extortion, and intrusion

Microsoft's top resources for ransomware defense

Reference

• What is ransomware?
• Latest ransomware blogs
• Learn about Microsoft Defender XDR for in-depth ransomware reporting
• Use Microsoft Copilot for Security for AI-enhanced ransomware defense

Frequently asked questions about ransomware - How Microsoft can help

Concept

• What are the stages in a ransomware attack?
• How do I detect pre-ransom activities?
• How do I back-up and restore post ransomware attack?
• How do I proactively hunt for ransomware?
• What are common types of malware that are used in ransomware campaigns?
• Can I download a ransomware incident response playbook?

Prevalent ransomware trends

Reference

• Recent Microsoft Security ransomware blog
• Recent Microsoft social media posts about ransomware
• Human-operated ransomware (HumOR) and pre-HumOR attacks
• Automatic disruption of ransomware attacks
• Ransomware threat actor highlight - BlackCat
• Insights on ransomware and extortion - Microsoft Digital Defense Report 2023

Microsoft Blogs about ransomware

Reference

• Moonstone Sleet emerges as new North Korean actor with new bag of tricks - May 2024
• Ransomware as a service. Understanding the cybercrime gig economy and how to protect yourself
• How Microsoft protects against ransomware
• Octo Tempest - A recurring ransomware threat
• Building an anti-ransomware program at Microsoft focused on an Optimal Ransomware Resiliency State

Learn the nature of ransomware attacks with Microsoft

How-To Guide

• Ransomware attack overview
• Prepare your ransomware attack recovery plan
• Limit the scope of damage from a ransomware attack
• Make it hard for ransomware threat actors to access your environment

Microsoft products for defense against ransomware

Reference

• In Microsoft 365
• In Azure
• In Sentinel
• In SharePoint

Ransomware protection using threat intelligence for Microsoft Defender XDR subscription holders

Reference

• Threat analytics reports
• Microsoft Defender Threat Intelligence

Microsoft ransomware incident response playbooks

Reference

• Detecting human-operated ransomware with Microsoft 365
• Responding to ransomware attacks
• Microsoft Incident Response approach
• Ransomware Incident Response playbook template
• Azure Defenses for Ransomware Attack ebook