Скачать или смотреть Alert Triage and Response Automation with Microsoft Defender + Intezer

Here we'll show how Microsoft Defender for Endpoint can connect with Intezer, so you can automate triage, deep analysis, and response tasks for all the endpoint alerts your team gets. Make sure you're not wasting time on false positives and immediately have key information about real the threats.

00:00 Automating triage and incident response for Microsoft Defender alerts with Intezer
00:22 False positive alert example: "RTcore64 hacktool"
00:51 Intezer's deeper analysis of the false positive alert
01:13 Malicious alert example: REMCOS malware
02:21 Improved threat classification from Intezer, with IOCs and TTPs
03:09 Using Detect & Hunt for additional indicators and hunting rules
03:56 Trying out Intezer for Microsoft Defender

Want to see how our Autonomous SOC platform works? Connect your Microsoft Defender for Endpoint instance with Intezer to test it out for free. Just click the "free" option here to create an account: https://www.intezer.com/pricing/
#cybersecurity #soc #automation #incidentresponse