Microsoft Security Experts News and Insights

Cybersecurity professionals collaborating in S O C with colorful line art overlaid.

May 9, 2022

8 min read

Building a safer world together with our partners—introducing Microsoft Security Experts

Technology alone is not enough to defend against cybercrime. It’s critical, but it’s the combination of leading technologies, comprehensive threat intelligence, and highly skilled people that makes for a truly effective security posture.

Dec 2, 2021

9 min read

Structured threat hunting: One way Microsoft Defender Experts for Hunting prioritizes customer defense

Our approach to threat hunting is designed to evaluate impact and escalate potential threats for investigation, based on how damaging the potential threat would be. It is also designed for speed: due to the highly time-sensitive nature of the threat response, the most dangerous potential threats are analyzed first.

Looking into a conference room or board room meeting including people sitting around table in a room with international time clocks.

Jun 9, 2021

6 min read

CRSP: The emergency team fighting cyber attacks beside customers

CRSP is a worldwide team of cybersecurity experts operating in most countries, across all organizations, with deep expertise to secure an environment post-security breach and to help you prevent a breach in the first place.

Apr 1, 2021

11 min read

Automating threat actor tracking: Understanding attacker behavior for intelligence and contextual alerting

A probabilistic graphical modeling framework used by Microsoft 365 Defender research and intelligence teams for threat actor tracking enables us to quickly predict the likely threat group responsible for an attack, as well as the likely next attack stages.

A mother and her daughter are working and learning remotely in their living room.

Feb 4, 2021

2 min read

Modernizing your network security strategy

From the global pandemic to recent cyberattacks, our world has faced many challenges during the past 12 months. Some of these challenges we can’t change. However, I’m pleased about the ones we can, and are changing across the cybersecurity landscape.

An image of a black male developer at work in an Enterprise office workspace.

Jun 25, 2020

5 min read

Lessons learned from the Microsoft SOC—Part 3d: Zen and the art of threat hunting

This blog provides lessons learned on how Microsoft hunts for threats in our IT environment and how you can apply these lessons to building or improving your threat hunting program. This is the seventh in a series.

Microsoft Cyber Defense Operations Center

May 1, 2020

8 min read

Microsoft Threat Protection leads in real-world detection in MITRE ATT&CK evaluation

The latest round of MITRE ATT&CK evaluations proved yet again that Microsoft customers can trust they are fully protected even in the face of such an advanced attack as APT29.

Mar 10, 2020

6 min read

Threat hunting: Part 1—Why your SOC needs a proactive hunting team

A threat hunting team can help you defend against stealth attackers.

Oct 28, 2019

3 min read

Experts on demand: Your direct line to Microsoft security insight, guidance, and expertise

Experts on demand is now generally available and gives customers direct access to real-life Microsoft threat analysts to help with their security investigations.