Share this article

Latest news

With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low

Copilot in Outlook will generate personalized themes for you to customize the app

Microsoft will raise the price of its 365 Suite to include AI capabilities

Death Stranding Director’s Cut is now Xbox X|S at a huge discount

Outlook will let users create custom account icons so they can tell their accounts apart easier

Microsoft announces two new Defender products for businesses

2 min. read

Published onAugust 2, 2022

published onAugust 2, 2022

Share this article

Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more

Microsofthas announcedtwo new products under the Microsoft Defender lineup. Designed for businesses, and powered by their acquisition of cyber security company RiskIQ, Microsoft hopes the newDefender Threat Intelligence, andDefender External Attack Surface Managementcan aim to help companies reduce their chances of getting hit by cyber-attacks.

We’ll begin by getting into the details of Microsoft Defender Threat Intelligence. This new product is all about offering real-time data from Microsoft’s security signals. It builds on the real-time detections of Microsoft Sentinel. and lets organizations hunt for threats more broadly, and helps them uncover more adversaries. According to Microsoft:

Microsoft Defender Threat Intelligence maps the internet every day, providing security teams with the necessary information to understand adversaries and their attack techniques. Customers can access a library of raw threat intelligence detailing adversaries by name, correlating their tools, tactics, and procedures (TTPs), and can see active updates within the portal as new information is distilled from Microsoft’s security signals and experts. Defender Threat Intelligence lifts the veil on the attacker and threat family behavior and helps security teams find, remove, and block hidden adversary tools within their organization.

Now, for Microsoft Defender External Attack Surface Management. This second product under the Microsoft Defender offering is all about helping businesses see their operations the way an attacker can. More specifically, security teams can use this product to see and discover unmanaged resources that are visible from the internet, which is what an attacker might usually see. In Microsoft’s words:

Microsoft Defender External Attack Surface Management scans the internet and its connections every day. This builds a complete catalog of a customer’s environment, discovering internet-facing resources—even the agentless and unmanaged assets. Continuous monitoring, without the need for agents or credentials, prioritizes new vulnerabilities.

Microsoft says these new offerings come at a time when ransomware losses are hitting businesses hard. The company is citing anFBI reportwhich found that these types of losses totaled more than $50 million, with total cybercrimes costing 6.9 billion. Defender Threat Intelligence and Defender External Attack Surface Management should help reduce these threats.

Radu Tyrsina

Radu Tyrsina has been a Windows fan ever since he got his first PC, a Pentium III (a monster at that time).

For most of the kids of his age, the Internet was an amazing way to play and communicate with others, but he was deeply impressed by the flow of information and how easily you can find anything on the web.

Prior to founding Windows Report, this particular curiosity about digital content enabled him to grow a number of sites that helped hundreds of millions reach faster the answer they’re looking for.

User forum

0 messages

Sort by:LatestOldestMost Votes

Comment*

Name*

Email*

Commenting as.Not you?

Save information for future comments

Comment

Δ

Radu Tyrsina