You're reading from Windows Ransomware Detection and Protection Securing Windows endpoints, the cloud, and infrastructure using Microsoft Intune, Sentinel, and Defender

Product type Paperback

Published in Mar 2023

Publisher Packt

ISBN-13 9781803246345

Length 290 pages

Edition 1st Edition

Languages

Rust

Tools

Azure

Concepts

Cybersecurity

Author (1):

Marius Sandbu

View More author details

Table of Contents (16) Chapters

Preface

1. Part 1:Ransomware Basics

2. Chapter 1: Ransomware Attack Vectors and the Threat Landscape FREE CHAPTER

3. Chapter 2: Building a Secure Foundation

4. Part 2:Protect and Detect

5. Chapter 3: Security Monitoring Using Microsoft Sentinel and Defender

6. Chapter 4: Ransomware Countermeasures – Windows Endpoints, Identity, and SaaS

7. Chapter 5: Ransomware Countermeasures – Microsoft Azure Workloads

8. Chapter 6: Ransomware Countermeasures – Networking and Zero-Trust Access

9. Chapter 7: Protecting Information Using Azure Information Protection and Data Protection

10. Part 3:Assume Breach

11. Chapter 8: Ransomware Forensics

12. Chapter 9: Monitoring the Threat Landscape

13. Chapter 10: Best Practices for Protecting Windows from Ransomware Attacks

14. Index

Why subscribe?

15. Other Books You May Enjoy

Azure Backup

By default, when you set up a virtual machine in Azure, all data that is stored on it is automatically replicated three times within the same data center. This is also known as Local Redundant Storage (LRS) and this is to ensure the availability of the data.

If we were to get our machines infected with ransomware that encrypts our data in Azure, the replication mechanism would kick in and replicate that data three times as well. So, it is important to understand that this feature does not replace the need for a backup of the data.

In Azure, Microsoft provides a backup service that can back up virtual machine workloads and stores the data on a separate storage account. This storage account is only accessible from the backup service, and by default, backup data at rest is encrypted using Platform-Managed Keys (PMKs). In addition, this service also has soft delete mechanisms, which means that there is no way to purge/delete or overwrite the data that the service is...

The rest of the chapter is locked

You're reading from Windows Ransomware Detection and Protection Securing Windows endpoints, the cloud, and infrastructure using Microsoft Intune, Sentinel, and Defender

Table of Contents (16) Chapters

Azure Backup

Authors (1)

Personalised recommendations for you

You're reading from Windows Ransomware Detection and Protection Securing Windows endpoints, the cloud, and infrastructure using Microsoft Intune, Sentinel, and Defender

Table of Contents (16) Chapters

Azure Backup

Unlock this book and the full library FREE for 7 days

Authors (1)

Personalised recommendations for you