You're reading from Windows Ransomware Detection and Protection Securing Windows endpoints, the cloud, and infrastructure using Microsoft Intune, Sentinel, and Defender

Product type Paperback

Published in Mar 2023

Publisher Packt

ISBN-13 9781803246345

Length 290 pages

Edition 1st Edition

Languages

Rust

Tools

Azure

Concepts

Cybersecurity

Author (1):

Marius Sandbu

View More author details

Table of Contents (16) Chapters

Preface

1. Part 1:Ransomware Basics

2. Chapter 1: Ransomware Attack Vectors and the Threat Landscape FREE CHAPTER

3. Chapter 2: Building a Secure Foundation

4. Part 2:Protect and Detect

5. Chapter 3: Security Monitoring Using Microsoft Sentinel and Defender

6. Chapter 4: Ransomware Countermeasures – Windows Endpoints, Identity, and SaaS

7. Chapter 5: Ransomware Countermeasures – Microsoft Azure Workloads

8. Chapter 6: Ransomware Countermeasures – Networking and Zero-Trust Access

9. Chapter 7: Protecting Information Using Azure Information Protection and Data Protection

10. Part 3:Assume Breach

11. Chapter 8: Ransomware Forensics

12. Chapter 9: Monitoring the Threat Landscape

13. Chapter 10: Best Practices for Protecting Windows from Ransomware Attacks

14. Index

Why subscribe?

15. Other Books You May Enjoy

Data exfiltration

Imagine that you are logging on to your computer or your management server only to find that your systems have been encrypted and there is a ransom note on the desktop stating that your data has been exfiltrated. Following this, you get notified that if you do not pay the ransom, all your data will be published online. This data might contain confidential information. In 2020, a Finnish private psychotherapy service provider named Vastaamo’s patient database was hacked and then leaked to the dark web. The information in the patient database which contained journals for 30,000 patients was then used to extort both the service provider and the patients directly.

In the last 2 years, we have seen that most ransomware attacks use this tactic. One of the latest attacks at the time of writing this book was against Cisco. The attackers claimed that they managed to steal 2.8 GB of data after an attack in June 2022.

In addition, companies such as Accenture were...

The rest of the chapter is locked

You're reading from Windows Ransomware Detection and Protection Securing Windows endpoints, the cloud, and infrastructure using Microsoft Intune, Sentinel, and Defender

Table of Contents (16) Chapters

Data exfiltration

Authors (1)

Personalised recommendations for you

You're reading from Windows Ransomware Detection and Protection Securing Windows endpoints, the cloud, and infrastructure using Microsoft Intune, Sentinel, and Defender

Table of Contents (16) Chapters

Data exfiltration

Unlock this book and the full library FREE for 7 days

Authors (1)

Personalised recommendations for you