Summary

In this chapter, we took a closer look at some of the countermeasures for endpoints using Endpoint Manager with features such as ASR rules and management of Defender and antimalware rules. Additionally, we learned how to ensure that we have an up-to-date endpoint and that our browser is updated on a regular basis. Then, we went into how we can protect our services using MFA services such as Conditional Access and the NPS with Azure MFA service. Lastly, we went into how we can protect our email using services such as SPF, DKIM, DMARC, and other mechanisms in Office 365 such as Safe Attachments.

As part of an overall security strategy for protecting against ransomware, implementing security mechanisms to protect end users and devices will minimize the risk of ransomware. However, we still need to have a holistic view of our environment. Therefore, it is also important that we implement security mechanisms for our virtual infrastructure, too. In the next chapter, we will look...