You're reading from Windows Ransomware Detection and Protection Securing Windows endpoints, the cloud, and infrastructure using Microsoft Intune, Sentinel, and Defender

Product type Paperback

Published in Mar 2023

Publisher Packt

ISBN-13 9781803246345

Length 290 pages

Edition 1st Edition

Languages

Rust

Tools

Azure

Concepts

Cybersecurity

Author (1):

Marius Sandbu

View More author details

Table of Contents (16) Chapters

Preface

1. Part 1:Ransomware Basics

2. Chapter 1: Ransomware Attack Vectors and the Threat Landscape FREE CHAPTER

3. Chapter 2: Building a Secure Foundation

4. Part 2:Protect and Detect

5. Chapter 3: Security Monitoring Using Microsoft Sentinel and Defender

6. Chapter 4: Ransomware Countermeasures – Windows Endpoints, Identity, and SaaS

7. Chapter 5: Ransomware Countermeasures – Microsoft Azure Workloads

8. Chapter 6: Ransomware Countermeasures – Networking and Zero-Trust Access

9. Chapter 7: Protecting Information Using Azure Information Protection and Data Protection

10. Part 3:Assume Breach

11. Chapter 8: Ransomware Forensics

12. Chapter 9: Monitoring the Threat Landscape

13. Chapter 10: Best Practices for Protecting Windows from Ransomware Attacks

14. Index

Why subscribe?

15. Other Books You May Enjoy

Remote desktop management

Most Windows environments use tools such as RDP to perform remote management. When using features such as RDP, one of the recommendations is to enable Network Level Authentication (NLA). NLA provides an extra layer of pre-authentication before a connection is established and ensures that information about the system is not exposed before the user has successfully authenticated. We can verify whether NLA is enabled on a machine by opening System Properties and going to the Remote tab, as shown in the following screenshot:

Figure 10.2 – NLA setting for RDP

Note

I do not recommend using RDP to perform remote management; you should have either a third-party service or use cloud services, such as Azure Bastion, or a tool such as Windows Admin Center that supports Multi-Factor Authentication (MFA). There are also other new alternatives, such as Cloudflare Zero Trust or Hashicorp Boundary; these options also support integrating...

The rest of the chapter is locked

You're reading from Windows Ransomware Detection and Protection Securing Windows endpoints, the cloud, and infrastructure using Microsoft Intune, Sentinel, and Defender

Table of Contents (16) Chapters

Remote desktop management

Authors (1)

Personalised recommendations for you

You're reading from Windows Ransomware Detection and Protection Securing Windows endpoints, the cloud, and infrastructure using Microsoft Intune, Sentinel, and Defender

Table of Contents (16) Chapters

Remote desktop management

Unlock this book and the full library FREE for 7 days

Authors (1)

Personalised recommendations for you