{"id":89405,"date":"2019-05-14T09:00:48","date_gmt":"2019-05-14T16:00:48","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\/?p=89405"},"modified":"2023-05-15T23:01:23","modified_gmt":"2023-05-16T06:01:23","slug":"executing-vision-microsoft-threat-protection","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/","title":{"rendered":"Executing on the vision of Microsoft Threat Protection"},"content":{"rendered":"<p>Over the last several months, we\u2019ve provided regular updates on the rapid progress we\u2019re making with <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/the-evolution-of-microsoft-threat-protection\/\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Threat Protection<\/a>, which enables your organization to:<\/p>\n<ul>\n<li><strong>Protect your assets<\/strong> <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/04\/25\/microsoft-threat-protection-april-update\/\" target=\"_blank\" rel=\"noopener noreferrer\">with identity-driven security and powerful conditional access policies<\/a> which ensure your assets are secured from unauthorized users, devices, or apps.<\/li>\n<li><strong>Connect the dots<\/strong> between disparate threat signals and develop <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/Security-Privacy-and-Compliance\/See-How-Microsoft-Threat-Protection-is-the-Future-of-threat\/ba-p\/360197\" target=\"_blank\" rel=\"noopener noreferrer\">threat incidents<\/a> by grouping alerts from different parts of your environment, stitching together the elements of a threat.<\/li>\n<li><strong>Empower your defenders<\/strong>, providing in-depth analysis to identify the full scope and impact of a threat.<\/li>\n<\/ul>\n<p>We support these capabilities by offering you <a href=\"https:\/\/docs.microsoft.com\/en-us\/office365\/securitycompliance\/automated-investigation-response-office\" target=\"_blank\" rel=\"noopener noreferrer\">intelligent automation<\/a> as well as <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/02\/28\/announcing-microsoft-threat-experts\/\" target=\"_blank\" rel=\"noopener noreferrer\">human expertise<\/a> to quickly resolve situations and keep your business running. I recently shared our vision of Microsoft Threat Protection with Jeremy Chapman in a Microsoft Mechanics video broadcast:<\/p>\n<p><iframe loading=\"lazy\" src=\"https:\/\/www.youtube.com\/embed\/3ge1aAm1jX0\" width=\"900\" height=\"500\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><span class=\"mce_SELRES_start\" style=\"width: 0px; line-height: 0; overflow: hidden; display: inline-block;\" data-mce-type=\"bookmark\">\ufeff<\/span><\/iframe><\/p>\n<p>We strongly believe in our vision and are confident our customers will benefit from enhanced security with Microsoft Threat Protection as we continue adding capabilities with unstoppable momentum. Today, I want to spend time highlighting what Microsoft Threat Protection <em>can already do for you<\/em>. While we\u2019re very excited about the vision and pushing towards releasing more features, it\u2019s important to share the significant advantages which are already available with Microsoft Threat Protection <strong>today<\/strong>. I\u2019m going to use a real example of a common, yet lethal, threat type to showcase how Microsoft Threat Protection already makes your organization more secure.<\/p>\n<h3>Executing on our vision<\/h3>\n<p>The more threats we see, the more we can stop. This virtual cycle means that each threat we see helps further enhance our machine learning models, which in turn improves our ability to stop subsequent threats. As we\u2019ve shared in the past, the <a href=\"http:\/\/cloud-platform-assets.azurewebsites.net\/intelligent-security-graph\/\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Intelligent Security Graph<\/a> (Figure 1) enables us to see billions of threats and assess 6.5 <em>trillion<\/em> signals daily. Importantly, we don\u2019t only see a large quantity of threats, but we also see threats from a wide variety of sources. Through the Intelligent Security Graph, threat signals are seamlessly shared across all the services in Microsoft Threat Protection, providing comprehensive security across multiple attack vectors.<\/p>\n<p><a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\/wp-content\/uploads\/2019\/05\/Evolution-image-1.png\" target=\"_blank\" rel=\"noopener noreferrer\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-89407 size-full\" src=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\/wp-content\/uploads\/2019\/05\/Evolution-image-1.png\" alt=\"Infographic of the strength of signal offered by the Microsoft Intelligent Security Graph.\" width=\"2035\" height=\"1164\" srcset=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/05\/Evolution-image-1.png 2035w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/05\/Evolution-image-1-300x172.png 300w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/05\/Evolution-image-1-768x439.png 768w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/05\/Evolution-image-1-1024x586.png 1024w\" sizes=\"(max-width: 2035px) 100vw, 2035px\" \/><\/a><\/p>\n<p><em>Figure 1. The strength of signal offered by the Microsoft Intelligent Security Graph.<\/em><\/p>\n<p>A <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2018\/12\/19\/tackling-phishing-with-signal-sharing-and-machine-learning\/\" target=\"_blank\" rel=\"noopener noreferrer\">great example<\/a> of how Microsoft Threat Protection is already executing on its promised vision is how we address phishing campaigns. Phishing has been on a steady rise over the last few years. As the provider of one of the largest email services on the planet, we expect to be a primary target for attacks. In 2018 alone, Microsoft\u2019s analysts analyzed (Figure 2) over 300,000 phishing campaigns and 8 million business email compromise (BEC) attempts.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-89420 size-full\" src=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\/wp-content\/uploads\/2019\/05\/Figure-2-Phishing-campaigns-and-BEC-attempt-in-2018-JPG.jpg\" alt=\"Infographic showing data from Office 365 security analysts on the phishing campaigns and BEC attempts from 2018.\" width=\"1067\" height=\"389\" srcset=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/05\/Figure-2-Phishing-campaigns-and-BEC-attempt-in-2018-JPG.jpg 1067w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/05\/Figure-2-Phishing-campaigns-and-BEC-attempt-in-2018-JPG-300x109.jpg 300w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/05\/Figure-2-Phishing-campaigns-and-BEC-attempt-in-2018-JPG-768x280.jpg 768w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/05\/Figure-2-Phishing-campaigns-and-BEC-attempt-in-2018-JPG-1024x373.jpg 1024w\" sizes=\"(max-width: 1067px) 100vw, 1067px\" \/><\/p>\n<p><em>Figure 2. Data from Office 365 security analysts on the phishing campaigns and BEC attempts from 2018.<\/em><\/p>\n<p>While these numbers can be worrisome, Microsoft Threat Protection <em>is designed<\/em> to secure your organization from phishing, whether the campaign attacks the endpoint, email, or through the web. In a <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2018\/12\/19\/tackling-phishing-with-signal-sharing-and-machine-learning\/\" target=\"_blank\" rel=\"noopener noreferrer\">recent campaign<\/a>, anomaly detection algorithms in\u00a0<a href=\"https:\/\/www.microsoft.com\/en-us\/windowsforbusiness\/windows-atp?ocid=cx-blog-mmpc\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Defender Advanced Threat Protection (ATP)<\/a>\u00a0<a href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/security\/threat-protection\/windows-defender-antivirus\/windows-defender-antivirus-in-windows-10\" target=\"_blank\" rel=\"noopener noreferrer\">next-generation protection<\/a> pointed to multiple PDF files <em>that <\/em>\u00a0<em>Microsoft could detect<\/em>. We were the only organization able to detect these phish PDFs because we leveraged the knowledge from multiple security services operating on various attack vectors. In this example, the malicious PDF files (Figure 3) were blocked by machine learning models, enhanced by assimilating signals from multiple services of Microsoft Threat Protection.<\/p>\n<p><a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\/wp-content\/uploads\/2019\/05\/Evolution-image-3.png\" target=\"_blank\" rel=\"noopener noreferrer\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-89409 size-full\" src=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\/wp-content\/uploads\/2019\/05\/Evolution-image-3.png\" alt=\"Image of one of several PDF files that only Microsoft was detecting (as Trojan:PDF\/Sonbokli.A!cl) at the time it was first observed (Source: VirusTotal).\" width=\"1465\" height=\"1159\" srcset=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/05\/Evolution-image-3.png 1465w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/05\/Evolution-image-3-300x237.png 300w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/05\/Evolution-image-3-768x608.png 768w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/05\/Evolution-image-3-1024x810.png 1024w\" sizes=\"(max-width: 1465px) 100vw, 1465px\" \/><\/a><\/p>\n<p><em>Figure 3. One of several PDF files <strong>that only Microsoft was detecting<\/strong> (as Trojan:PDF\/Sonbokli.A!cl) at the time it was first observed (Source:\u00a0<\/em><a href=\"https:\/\/www.virustotal.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">VirusTotal<\/a><em>).<\/em><\/p>\n<p>Through the Microsoft Intelligent Security Graph, the detection algorithm was enriched with URL and domain reputation intelligence from\u00a0<a href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/security\/threat-protection\/windows-defender-smartscreen\/windows-defender-smartscreen-overview\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Defender SmartScreen<\/a>, the service powering the anti-phishing technology in Microsoft Edge, as well as the\u00a0network protection\u00a0capability in Microsoft Defender ATP.<\/p>\n<p>Additionally, <a href=\"https:\/\/docs.microsoft.com\/en-us\/office365\/securitycompliance\/office-365-atp\" target=\"_blank\" rel=\"noopener noreferrer\">Office 365 Advanced Threat Protection (ATP)<\/a> provided rich optics from PDF phish files distributed via email. When\u00a0Office 365\u00a0ATP detects a suspicious file or URL in emails, it can detonate the file and apply heuristics and sophisticated machine learning to determine a verdict. This verdict is shared with other services in Microsoft Threat Protection. In the case of these PDF files, all the services in Microsoft Threat Protection could immediately block the corrupted PDF files because the original signal from Office 365\u00a0ATP was shared with all the other services in Microsoft Threat Protection.<\/p>\n<p>Microsoft Threat Protection also stops threats <em>quickly<\/em> because of its unique attributes. Every day, Microsoft\u00a0<a href=\"https:\/\/cloudblogs.microsoft.com\/microsoftsecure\/2018\/08\/09\/protecting-the-protector-hardening-machine-learning-defenses-against-adversarial-attacks\/\" target=\"_blank\" rel=\"noopener noreferrer\">sees millions of new attacks<\/a>\u00a0that run for just 60 minutes or less. This fast pace requires security to be automatic, in real-time, and accurate. The signal sharing and mitigation across Microsoft Threat Protection is robust and comprehensive. Below (Figure 4) is an actual timeline showing how the threat originally identified by SmartScreen provided signal to both Office ATP and Microsoft Defender ATP, which both blocked the threat.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-89422 size-full\" src=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\/wp-content\/uploads\/2019\/05\/Microsoft_Threat_Protection_Blog_Timeline-1.gif\" alt=\"Image of a threat timeline of a campaign from the first identification with SmartScreen to mitigations by Office ATP\/Exchange Online Protection (EOP) and Microsoft Defender ATP.\" width=\"1920\" height=\"1080\" \/><\/p>\n<p><em>Figure 4. Threat timeline of this campaign from the first identification with SmartScreen to mitigations by Office ATP\/Exchange Online Protection (EOP) and Microsoft Defender ATP.<\/em><\/p>\n<h3>Great intelligence enables great security<\/h3>\n<p>Our unparalleled intelligence, seamless integration, and best-of-breed solutions for multiple attack vectors leads to the staggering numbers of threats we can detect and mitigate across multiple threat vectors. Below are statistics of the threats which Microsoft Threat Protection mitigated in 2018 (Figure 5). What\u2019s important is not only the number of threats we\u2019ve detected and blocked, but also the fact that we do so for threats across multiple, disparate attack vectors. This is the same strength of security you will benefit from when you implement Microsoft Threat Protection.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-89421 size-full\" src=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\/wp-content\/uploads\/2019\/05\/Rob-Blog-Stats-bold-JPG.jpg\" alt=\"Image of Microsoft Threat Protection in action. Some of the detections and mitigations already offered with the solution.\" width=\"1999\" height=\"958\" srcset=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/05\/Rob-Blog-Stats-bold-JPG.jpg 1999w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/05\/Rob-Blog-Stats-bold-JPG-300x144.jpg 300w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/05\/Rob-Blog-Stats-bold-JPG-768x368.jpg 768w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/05\/Rob-Blog-Stats-bold-JPG-1024x491.jpg 1024w\" sizes=\"(max-width: 1999px) 100vw, 1999px\" \/><\/p>\n<p><em>Figure 5. Microsoft Threat Protection in action. Some of the detections and mitigations already offered with the solution.<\/em><\/p>\n<h3>Revamped website to keep you up to date<\/h3>\n<p>Today, we\u2019re excited to launch our new <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/technology\/threat-protection\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Threat Protection website<\/a>, where you\u2019ll find great collateral summarizing the full scope of capabilities offered by Microsoft Threat Protection. On the site, you\u2019ll find <em>three new webcasts<\/em> where our engineers offer details and examples of:<\/p>\n<ul>\n<li><strong>Automated Incident Response<\/strong>\u2014Unique SecOps capabilities only available with Microsoft.<\/li>\n<li><strong>Azure Sentinel<\/strong>\u2014Our newly launched SIEM-as-a-service.<\/li>\n<li><strong>Microsoft Threat Experts and Threat and Vulnerability Management<\/strong>\u2014For endpoints.<\/li>\n<\/ul>\n<p>The new site also links to all the services which are part of Microsoft Threat Protection with great collateral offering details on how the individual services help secure specific attack vectors.<\/p>\n<h3>Experience the evolution of Microsoft Threat Protection<\/h3>\n<p>Hopefully, I gave you a glimpse of how Microsoft Threat Protection has already started executing on the vision of securing the modern organization. Take a moment to\u00a0<a href=\"https:\/\/techcommunity.microsoft.com\/t5\/Security-Privacy-and-Compliance\/Announcing-Microsoft-Threat-Protection\/ba-p\/262783\" target=\"_blank\" rel=\"noopener noreferrer\">learn more about Microsoft Threat Protection<\/a>, read our <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/the-evolution-of-microsoft-threat-protection\/\" target=\"_blank\" rel=\"noopener noreferrer\">previous monthly updates<\/a>, and visit our <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/technology\/threat-protection\" target=\"_blank\" rel=\"noopener noreferrer\">new website<\/a>.<\/p>\n<p><a href=\"https:\/\/customers.microsoft.com\/en-us\/story\/telit-professional-services-microsoft-365\" target=\"_blank\" rel=\"noopener noreferrer\">Organizations<\/a> have already transitioned to Microsoft Threat Protection and <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/What-s-New\/SecOps-is-more-effective-thanks-to-Microsoft-Windows-Defender\/m-p\/272925#M145\" target=\"_blank\" rel=\"noopener noreferrer\">partners<\/a> are leveraging its powerful capabilities. Begin a trial of Microsoft Threat Protection services today to experience the benefits of the most comprehensive, integrated, and secure threat protection solution available to your organization.<\/p>\n<ul>\n<li><a href=\"https:\/\/docs.microsoft.com\/en-us\/enterprise-mobility-security\/mtptrial\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Threat Protection trial<\/a><\/li>\n<li><a href=\"https:\/\/azure.microsoft.com\/en-us\/free\/\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Azure Sentinel<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Learn about how we\u2019re already executing on the vision of Microsoft Threat Protection\u2014the premier solution for securing the modern workplace across identities, endpoints, user data, apps, and infrastructure.<\/p>\n","protected":false},"author":96,"featured_media":88387,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ep_exclude_from_search":false,"_classifai_error":"","footnotes":""},"content-type":[3662],"topic":[3684],"products":[3690,3694,3693],"threat-intelligence":[],"tags":[],"coauthors":[1935],"class_list":["post-89405","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","content-type-news","topic-security-operations","products-microsoft-defender","products-microsoft-defender-for-endpoint","products-microsoft-defender-xdr"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Executing on the vision of Microsoft Threat Protection<\/title>\n<meta name=\"description\" content=\"Learn about how we\u2019re already executing on the vision of Microsoft Threat Protection\u2014the premier solution for securing the modern workplace across identities, endpoints, user data, apps, and infrastructure.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Executing on the vision of Microsoft Threat Protection\" \/>\n<meta property=\"og:description\" content=\"Learn about how we\u2019re already executing on the vision of Microsoft Threat Protection\u2014the premier solution for securing the modern workplace across identities, endpoints, user data, apps, and infrastructure.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Security Blog\" \/>\n<meta property=\"article:published_time\" content=\"2019-05-14T16:00:48+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-16T06:01:23+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/02\/OfficeNews_SecurityBlog_Header_04_Blue.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"500\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Rob Lefferts\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/01\/OfficeNews_SecurityBlog_Header_02_Blue.png\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Rob Lefferts\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/\"},\"author\":[{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/author\/rob-lefferts\/\",\"@type\":\"Person\",\"@name\":\"Rob Lefferts\"}],\"headline\":\"Executing on the vision of Microsoft Threat Protection\",\"datePublished\":\"2019-05-14T16:00:48+00:00\",\"dateModified\":\"2023-05-16T06:01:23+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/\"},\"wordCount\":1142,\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/01\/OfficeNews_SecurityBlog_Header_02_Blue.png\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/\",\"name\":\"Executing on the vision of Microsoft Threat Protection\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/01\/OfficeNews_SecurityBlog_Header_02_Blue.png\",\"datePublished\":\"2019-05-14T16:00:48+00:00\",\"dateModified\":\"2023-05-16T06:01:23+00:00\",\"description\":\"Learn about how we\u2019re already executing on the vision of Microsoft Threat Protection\u2014the premier solution for securing the modern workplace across identities, endpoints, user data, apps, and infrastructure.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/#primaryimage\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/01\/OfficeNews_SecurityBlog_Header_02_Blue.png\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/01\/OfficeNews_SecurityBlog_Header_02_Blue.png\",\"width\":1600,\"height\":500,\"caption\":\"A shot of a city skyline from above.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Executing on the vision of Microsoft Threat Protection\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\",\"name\":\"Microsoft Security Blog\",\"description\":\"Expert coverage of cybersecurity topics\",\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\",\"name\":\"Microsoft Security Blog\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png\",\"width\":512,\"height\":512,\"caption\":\"Microsoft Security Blog\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Executing on the vision of Microsoft Threat Protection","description":"Learn about how we\u2019re already executing on the vision of Microsoft Threat Protection\u2014the premier solution for securing the modern workplace across identities, endpoints, user data, apps, and infrastructure.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/","og_locale":"en_US","og_type":"article","og_title":"Executing on the vision of Microsoft Threat Protection","og_description":"Learn about how we\u2019re already executing on the vision of Microsoft Threat Protection\u2014the premier solution for securing the modern workplace across identities, endpoints, user data, apps, and infrastructure.","og_url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/","og_site_name":"Microsoft Security Blog","article_published_time":"2019-05-14T16:00:48+00:00","article_modified_time":"2023-05-16T06:01:23+00:00","og_image":[{"width":1600,"height":500,"url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/02\/OfficeNews_SecurityBlog_Header_04_Blue.png","type":"image\/png"}],"author":"Rob Lefferts","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/01\/OfficeNews_SecurityBlog_Header_02_Blue.png","twitter_misc":{"Written by":"Rob Lefferts","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/#article","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/"},"author":[{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/author\/rob-lefferts\/","@type":"Person","@name":"Rob Lefferts"}],"headline":"Executing on the vision of Microsoft Threat Protection","datePublished":"2019-05-14T16:00:48+00:00","dateModified":"2023-05-16T06:01:23+00:00","mainEntityOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/"},"wordCount":1142,"publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/01\/OfficeNews_SecurityBlog_Header_02_Blue.png","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/","name":"Executing on the vision of Microsoft Threat Protection","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/#primaryimage"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/01\/OfficeNews_SecurityBlog_Header_02_Blue.png","datePublished":"2019-05-14T16:00:48+00:00","dateModified":"2023-05-16T06:01:23+00:00","description":"Learn about how we\u2019re already executing on the vision of Microsoft Threat Protection\u2014the premier solution for securing the modern workplace across identities, endpoints, user data, apps, and infrastructure.","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/#primaryimage","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/01\/OfficeNews_SecurityBlog_Header_02_Blue.png","contentUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/01\/OfficeNews_SecurityBlog_Header_02_Blue.png","width":1600,"height":500,"caption":"A shot of a city skyline from above."},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/05\/14\/executing-vision-microsoft-threat-protection\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/"},{"@type":"ListItem","position":2,"name":"Executing on the vision of Microsoft Threat Protection"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/","name":"Microsoft Security Blog","description":"Expert coverage of cybersecurity topics","publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization","name":"Microsoft Security Blog","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png","contentUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png","width":512,"height":512,"caption":"Microsoft Security Blog"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/"}}]}},"msxcm_display_generated_audio":false,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Security Blog","distributor_original_site_url":"https:\/\/www.microsoft.com\/en-us\/security\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/89405"}],"collection":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/users\/96"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/comments?post=89405"}],"version-history":[{"count":0,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/89405\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/media\/88387"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/media?parent=89405"}],"wp:term":[{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/content-type?post=89405"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/topic?post=89405"},{"taxonomy":"products","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/products?post=89405"},{"taxonomy":"threat-intelligence","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/threat-intelligence?post=89405"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/tags?post=89405"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/coauthors?post=89405"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}