{"id":118136,"date":"2022-08-03T09:00:00","date_gmt":"2022-08-03T16:00:00","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?p=118136"},"modified":"2024-03-06T13:33:22","modified_gmt":"2024-03-06T21:33:22","slug":"microsoft-defender-experts-for-hunting-proactively-hunts-threats","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/","title":{"rendered":"Microsoft Defender Experts for Hunting proactively hunts threats"},"content":{"rendered":"\n<p>Today, we announced the general availability of <a href=\"https:\/\/www.microsoft.com\/security\/business\/services\/microsoft-defender-experts-hunting\">Microsoft Defender Experts for Hunting<\/a> to support organizations and their cybersecurity employees with proactive threat hunting.<\/p>\n\n\n\n<p>Defender Experts for Hunting was created for customers who have a robust security operations center but want Microsoft to help them proactively hunt threats using Microsoft Defender data. Defender Experts for Hunting is a proactive threat hunting service that goes beyond the endpoint to hunt across endpoints, Microsoft Office 365,&nbsp;cloud applications, and identity. Our experts will investigate anything they find, then hand off the contextual alert information along with remediation instructions so you can quickly respond. Our Defender Experts for Hunting <a href=\"https:\/\/www.youtube.com\/watch?v=4t1JgE0X0jc\" target=\"_blank\" rel=\"noreferrer noopener\">explainer video<\/a> walks you through how it works. <\/p>\n\n\n\n<p>Capabilities include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Threat hunting and analysis<\/strong>\u2014Defender Experts look deeper to expose advanced threats and identify the scope and impact of malicious activity associated with human adversaries or hands-on-keyboard attacks.<\/li>\n\n\n\n<li><strong>Defender Experts Notifications<\/strong>\u2014Notifications show up as incidents in <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/business\/siem-and-xdr\/microsoft-365-defender\">Microsoft 365 Defender<\/a>, helping to improve your security operations&#8217; incident response with specific information about the scope and method of entry.<\/li>\n\n\n\n<li><strong>Experts on Demand<\/strong>\u2014Click the \u201cAsk Defender Experts\u201d button in the Microsoft 365 Defender portal to get expert advice about threats your organization is facing. You can ask for help on a specific incident, nation-state actor, or attack vector.<\/li>\n\n\n\n<li><strong>Hunter-trained AI<\/strong>\u2014Defender Experts share their learning back into the automated tools they use to improve threat discovery and prioritization.<\/li>\n\n\n\n<li><strong>Reports<\/strong>\u2014An interactive report summarizing what we hunted and what we found.<\/li>\n<\/ul>\n\n\n\n<p>Bridgewater Associates, the world\u2019s largest hedge fund and one of Microsoft\u2019s first customers to implement a <a href=\"https:\/\/www.microsoft.com\/security\/business\/zero-trust\/\">Zero Trust<\/a> framework, helped Microsoft develop Defender Experts for Hunting, contributing decades of knowledge on how to keep intellectual property and investment data secure. The firm now uses Defender Experts for Hunting to extend its security teams so they can focus on the most complex and immediate security issues. Igor Tsyganskiy, Chief Technology Officer at Bridgewater Associates, believes in working together to protect one another from threats.<\/p>\n\n\n\n<p>\u201cCybersecurity is a cooperative rather than a competitive area,\u201d he said. \u201cIt takes a village to keep us all safer\u2026We are living in a digital world that is completely interconnected, and protecting ourselves singularly, separately from each other, is not going to work.\u201d<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"more-threats-not-enough-defenders\">More threats\u2014not enough defenders<\/h2>\n\n\n\n<p>Modern adversaries are well-organized and possess skills and resources that can challenge even organizations without open cybersecurity roles. These adversaries are also relentless. Microsoft Security blocked more than <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/05\/09\/building-a-safer-world-together-with-our-partners-introducing-microsoft-security-experts\/\">9.6 billion malware threats<\/a> and more than 35.7 billion phishing and malicious emails in 2021. They\u2019ve extended their attack focus from endpoints to identity, cloud apps, and email.<\/p>\n\n\n\n<p>It\u2019s getting harder every day for organizations to build and maintain a full security team, let alone one with the ever-expanding skillset required to meet the range of today\u2019s security demands. Proactive threat hunting\u2014one of the best ways to identify and respond to security threats\u2014is time-consuming, and most security teams are too busy with alert triage and security posture improvement efforts to spend time on proactive hunting.<\/p>\n\n\n\n<p>Additionally, organizations are struggling to recruit top security talent\u2014more important than ever since cybercrime is expected to cost the world USD10.5 trillion a year by 2025 (a 75 percent increase from the USD6 trillion in 2021).<sup>1<\/sup> With <a href=\"https:\/\/blogs.microsoft.com\/blog\/2021\/10\/28\/america-faces-a-cybersecurity-skills-crisis-microsoft-launches-national-campaign-to-help-community-colleges-expand-the-cybersecurity-workforce\/\" target=\"_blank\" rel=\"noreferrer noopener\">one in three security jobs<\/a> in the United States unfilled, cybersecurity employees often face huge workloads once hired. As a result, the average detection of a breach has been pushed out to 287 days as the number and impact of attacks continue to grow.<sup>2<\/sup><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"technology-alone-is-not-enough-to-fight-cybercrime\">Technology alone is not enough to fight cybercrime<\/h2>\n\n\n\n<p>Many companies don\u2019t face daily security attacks but need deep experience with threat hunting when they do, according to Tsyganskiy. &nbsp;<\/p>\n\n\n\n<p>\u201cTo manage security on its own, a company must sustain a very large and growing team,\u201d he said. \u201cIt\u2019s like trying to maintain your own police force. Given the low frequency of the most sophisticated attacks, this is an insane misallocation of resources 90 percent of the time.\u201d<\/p>\n\n\n\n<p>Microsoft is uniquely positioned to help customers meet today\u2019s security challenges. We secure devices, identities, apps, and clouds\u2014the fundamental fabric of our customers\u2019 lives\u2014with the full scale of our comprehensive multicloud, multiplatform solutions. Plus, we understand today\u2019s security challenges because we live this fight ourselves every single day.<\/p>\n\n\n\n<p>Now, our security expertise is&nbsp;<em>your<\/em>&nbsp;security expertise.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"how-microsoft-defender-experts-for-hunting-works\">How Microsoft Defender Experts for Hunting works<\/h2>\n\n\n\n<p>Every day at Microsoft, threat hunters work alongside advanced systems to analyze billions of signals, looking for threats that might affect customers. Due to the sheer volume of data, we\u2019re meticulous about surfacing threats that customers need to be notified about as quickly and accurately as possible.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/07\/Picture2-62e0669a70a77-1024x576.png\" alt=\"This flow diagram describes how Microsoft Defender Experts for Hunting can be split into three distinct steps. These are track, hunt, and analyze. These three steps form the basis of the service and allow Microsoft to proactively reveal the unseen threats impacting customers. \" class=\"wp-image-119282\" srcset=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/07\/Picture2-62e0669a70a77-1024x576.png 1024w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/07\/Picture2-62e0669a70a77-300x169.png 300w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/07\/Picture2-62e0669a70a77-768x432.png 768w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/07\/Picture2-62e0669a70a77-687x385.png 687w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/07\/Picture2-62e0669a70a77-1083x609.png 1083w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/07\/Picture2-62e0669a70a77-767x431.png 767w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/07\/Picture2-62e0669a70a77-539x303.png 539w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/07\/Picture2-62e0669a70a77.png 1280w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><strong>How we hunt:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Step 1<\/strong>: Microsoft Defender Experts monitor telemetry and look for malicious activity across the Microsoft 365 Defender platform associated with human adversaries or hands-on-keyboard attacks.<\/li>\n\n\n\n<li><strong>Step 2<\/strong>: If a threat is found to be valid, analysts conduct a deep-dive investigation, harnessing machine learning and gathering threat details, including scope and method of entry, to help protect your organization\u2019s endpoints, email, cloud apps, and identities.<\/li>\n\n\n\n<li><strong>Step 3<\/strong>: Our AI system and human hunters prioritize threat signals. Defender expert notifications appear in Microsoft 365 Defender, alerting you to the threat and sharing threat details.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"get-started\">Get started<\/h2>\n\n\n\n<p>To start your proactive threat hunting journey with <a href=\"https:\/\/aka.ms\/DefenderExpertsForHuntingGetStarted\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Defender Experts for Hunting<\/a>, please <a href=\"https:\/\/aka.ms\/DEX4HuntingCustomerInterestForm\" target=\"_blank\" rel=\"noreferrer noopener\">complete the customer interest form<\/a> to request a follow-up from our field team. To learn more, visit the <a href=\"https:\/\/www.microsoft.com\/security\/business\/services\/microsoft-defender-experts-hunting\">Defender Experts for Hunting<\/a> product page, <a href=\"https:\/\/query.prod.cms.rt.microsoft.com\/cms\/api\/am\/binary\/RE4Vwph?culture=en-us&amp;country=US\" target=\"_blank\" rel=\"noreferrer noopener\">download the datasheet<\/a><strong>, <\/strong>or <a href=\"https:\/\/www.youtube.com\/watch?v=4t1JgE0X0jc\" target=\"_blank\" rel=\"noreferrer noopener\">watch a short video<\/a>.<br><br>To learn more about Microsoft Security solutions,&nbsp;<a href=\"https:\/\/www.microsoft.com\/security\/business\/solutions\">visit our&nbsp;website<\/a>.&nbsp;Bookmark the&nbsp;<a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\">Security blog<\/a>&nbsp;to keep up with our expert coverage on security matters. Also, follow us at&nbsp;<a href=\"https:\/\/twitter.com\/@MSFTSecurity\" target=\"_blank\" rel=\"noreferrer noopener\">@MSFTSecurity<\/a>&nbsp;for the latest news and updates on cybersecurity.<\/p>\n\n\n\n<div style=\"height:59px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<p><sup>1<\/sup><a href=\"https:\/\/cybersecurityventures.com\/cyberwarfare-report-intrusion\/\" target=\"_blank\" rel=\"noreferrer noopener\">Cybercrime To Cost The World USD10.5 Trillion Annually By 2025<\/a>, Steve Morgan. November 13, 2020.<\/p>\n\n\n\n<p><sup>2<\/sup><a href=\"https:\/\/www.ibm.com\/downloads\/cas\/OJDVQGRY\" target=\"_blank\" rel=\"noreferrer noopener\">Cost of a Data Breach Report 2021<\/a>, IBM. 2021.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft Defender Experts for Hunting is now generally available. The security offering provides a proactive hunting service combining expert-trained technology with human-led services to hunt for threats across Microsoft 365 data.<\/p>\n","protected":false},"author":162,"featured_media":119222,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ep_exclude_from_search":false,"_classifai_error":"","footnotes":""},"content-type":[3662],"topic":[3681,3688,3689],"products":[3690,3721,3693,3719,3720],"threat-intelligence":[],"tags":[],"coauthors":[3308],"class_list":["post-118136","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","content-type-news","topic-risk-management","topic-threat-trends","topic-zero-trust","products-microsoft-defender","products-microsoft-defender-experts-for-hunting","products-microsoft-defender-xdr","products-microsoft-security-copilot","products-microsoft-security-experts","review-flag-1-1694638265-354","review-flag-2-1694638266-864","review-flag-3-1694638266-241","review-flag-5-1694638266-171","review-flag-6-1694638266-691","review-flag-7-1694638266-851","review-flag-9-1694638266-118","review-flag-gener-1694638270-216","review-flag-machi-1694638272-641","review-flag-percent"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.7 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Microsoft Defender Experts for Hunting proactively hunts threats | Microsoft Security Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Defender Experts for Hunting proactively hunts threats | Microsoft Security Blog\" \/>\n<meta property=\"og:description\" content=\"Microsoft Defender Experts for Hunting is now generally available. The security offering provides a proactive hunting service combining expert-trained technology with human-led services to hunt for threats across Microsoft 365 data.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Security Blog\" \/>\n<meta property=\"article:published_time\" content=\"2022-08-03T16:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-03-06T21:33:22+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-62e02f39cce25.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"800\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Microsoft Security Experts\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-62e02f39cce25.png\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Microsoft Security Experts\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/\"},\"author\":[{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/author\/microsoft-security-experts\/\",\"@type\":\"Person\",\"@name\":\"Microsoft Security Experts\"}],\"headline\":\"Microsoft Defender Experts for Hunting proactively hunts threats\",\"datePublished\":\"2022-08-03T16:00:00+00:00\",\"dateModified\":\"2024-03-06T21:33:22+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/\"},\"wordCount\":985,\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-62e02f39cce25.png\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/\",\"name\":\"Microsoft Defender Experts for Hunting proactively hunts threats | Microsoft Security Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-62e02f39cce25.png\",\"datePublished\":\"2022-08-03T16:00:00+00:00\",\"dateModified\":\"2024-03-06T21:33:22+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/#primaryimage\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-62e02f39cce25.png\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-62e02f39cce25.png\",\"width\":1200,\"height\":800,\"caption\":\"Chief information security officer collaborating with a practitioner in a security operations center.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Defender Experts for Hunting proactively hunts threats\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\",\"name\":\"Microsoft Security Blog\",\"description\":\"Expert coverage of cybersecurity topics\",\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\",\"name\":\"Microsoft Security Blog\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png\",\"width\":512,\"height\":512,\"caption\":\"Microsoft Security Blog\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft Defender Experts for Hunting proactively hunts threats | Microsoft Security Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft Defender Experts for Hunting proactively hunts threats | Microsoft Security Blog","og_description":"Microsoft Defender Experts for Hunting is now generally available. The security offering provides a proactive hunting service combining expert-trained technology with human-led services to hunt for threats across Microsoft 365 data.","og_url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/","og_site_name":"Microsoft Security Blog","article_published_time":"2022-08-03T16:00:00+00:00","article_modified_time":"2024-03-06T21:33:22+00:00","og_image":[{"width":1200,"height":800,"url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-62e02f39cce25.png","type":"image\/png"}],"author":"Microsoft Security Experts","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-62e02f39cce25.png","twitter_misc":{"Written by":"Microsoft Security Experts","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/#article","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/"},"author":[{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/author\/microsoft-security-experts\/","@type":"Person","@name":"Microsoft Security Experts"}],"headline":"Microsoft Defender Experts for Hunting proactively hunts threats","datePublished":"2022-08-03T16:00:00+00:00","dateModified":"2024-03-06T21:33:22+00:00","mainEntityOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/"},"wordCount":985,"publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-62e02f39cce25.png","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/","name":"Microsoft Defender Experts for Hunting proactively hunts threats | Microsoft Security Blog","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/#primaryimage"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-62e02f39cce25.png","datePublished":"2022-08-03T16:00:00+00:00","dateModified":"2024-03-06T21:33:22+00:00","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/#primaryimage","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-62e02f39cce25.png","contentUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-62e02f39cce25.png","width":1200,"height":800,"caption":"Chief information security officer collaborating with a practitioner in a security operations center."},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/03\/microsoft-defender-experts-for-hunting-proactively-hunts-threats\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/"},{"@type":"ListItem","position":2,"name":"Microsoft Defender Experts for Hunting proactively hunts threats"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/","name":"Microsoft Security Blog","description":"Expert coverage of cybersecurity topics","publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization","name":"Microsoft Security Blog","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png","contentUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png","width":512,"height":512,"caption":"Microsoft Security Blog"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/"}}]}},"msxcm_display_generated_audio":false,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Security Blog","distributor_original_site_url":"https:\/\/www.microsoft.com\/en-us\/security\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/118136"}],"collection":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/users\/162"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/comments?post=118136"}],"version-history":[{"count":1,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/118136\/revisions"}],"predecessor-version":[{"id":133668,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/118136\/revisions\/133668"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/media\/119222"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/media?parent=118136"}],"wp:term":[{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/content-type?post=118136"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/topic?post=118136"},{"taxonomy":"products","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/products?post=118136"},{"taxonomy":"threat-intelligence","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/threat-intelligence?post=118136"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/tags?post=118136"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/coauthors?post=118136"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}