You're reading from Windows Ransomware Detection and Protection Securing Windows endpoints, the cloud, and infrastructure using Microsoft Intune, Sentinel, and Defender

Product type Paperback

Published in Mar 2023

Publisher Packt

ISBN-13 9781803246345

Length 290 pages

Edition 1st Edition

Languages

Rust

Tools

Azure

Concepts

Cybersecurity

Author (1):

Marius Sandbu

View More author details

Table of Contents (16) Chapters

Preface

1. Part 1:Ransomware Basics

2. Chapter 1: Ransomware Attack Vectors and the Threat Landscape FREE CHAPTER

3. Chapter 2: Building a Secure Foundation

4. Part 2:Protect and Detect

5. Chapter 3: Security Monitoring Using Microsoft Sentinel and Defender

6. Chapter 4: Ransomware Countermeasures – Windows Endpoints, Identity, and SaaS

7. Chapter 5: Ransomware Countermeasures – Microsoft Azure Workloads

8. Chapter 6: Ransomware Countermeasures – Networking and Zero-Trust Access

9. Chapter 7: Protecting Information Using Azure Information Protection and Data Protection

10. Part 3:Assume Breach

11. Chapter 8: Ransomware Forensics

12. Chapter 9: Monitoring the Threat Landscape

13. Chapter 10: Best Practices for Protecting Windows from Ransomware Attacks

14. Index

Why subscribe?

15. Other Books You May Enjoy

File Server Resource Manager and file groups

The File Server Resource Manager (FSRM) role offers various features, including file screening. File screening allows file servers to monitor all shares in real time for any modifications to known ransomware extensions. If a user becomes infected with ransomware and attempts to modify their files, the file screen will detect this activity and deny the user access to the file shares, protecting the rest of the files from damage. This can help prevent or mitigate the impact of a ransomware attack.

The FSRM service can be added to existing file shares that are using Server Message Block (SMB) and integrated with AD.

To enable file screening, it uses a feature called File Group that consists of filename patterns to monitor, such as .xyz or .ctbl. By setting up this type of group, you can keep an eye on these patterns and take action if they appear on your server.

At this time, there are over 5,000 different extension types that are...

The rest of the chapter is locked

You're reading from Windows Ransomware Detection and Protection Securing Windows endpoints, the cloud, and infrastructure using Microsoft Intune, Sentinel, and Defender

Table of Contents (16) Chapters

File Server Resource Manager and file groups

Authors (1)

Personalised recommendations for you

You're reading from Windows Ransomware Detection and Protection Securing Windows endpoints, the cloud, and infrastructure using Microsoft Intune, Sentinel, and Defender

Table of Contents (16) Chapters

File Server Resource Manager and file groups

Unlock this book and the full library FREE for 7 days

Authors (1)

Personalised recommendations for you