You're reading from Windows Ransomware Detection and Protection Securing Windows endpoints, the cloud, and infrastructure using Microsoft Intune, Sentinel, and Defender

Product type Paperback

Published in Mar 2023

Publisher Packt

ISBN-13 9781803246345

Length 290 pages

Edition 1st Edition

Languages

Rust

Tools

Azure

Concepts

Cybersecurity

Author (1):

Marius Sandbu

View More author details

Table of Contents (16) Chapters

Preface

1. Part 1:Ransomware Basics

2. Chapter 1: Ransomware Attack Vectors and the Threat Landscape FREE CHAPTER

3. Chapter 2: Building a Secure Foundation

4. Part 2:Protect and Detect

5. Chapter 3: Security Monitoring Using Microsoft Sentinel and Defender

6. Chapter 4: Ransomware Countermeasures – Windows Endpoints, Identity, and SaaS

7. Chapter 5: Ransomware Countermeasures – Microsoft Azure Workloads

8. Chapter 6: Ransomware Countermeasures – Networking and Zero-Trust Access

9. Chapter 7: Protecting Information Using Azure Information Protection and Data Protection

10. Part 3:Assume Breach

11. Chapter 8: Ransomware Forensics

12. Chapter 9: Monitoring the Threat Landscape

13. Chapter 10: Best Practices for Protecting Windows from Ransomware Attacks

14. Index

Why subscribe?

15. Other Books You May Enjoy

Threat management

While collecting data and information is one important part, the second part is to have processes and routines in place to ensure that threats are identified and handled accordingly. While the approach to how you handle threat management in your company will differ depending on the size of the organization, I can share some of my personal experiences on how we handled this in smaller companies from an IT perspective:

Creating a cross-platform team with people from different areas of experience (network, infrastructure, endpoints, and identity), including the CISO/CIO depending on size.
Having a weekly stand-up meeting where somebody is responsible for collecting and presenting new threats that can impact the company based on the data collected in the last week. This responsibility needs to be rotated between different people in the team.
Also, if you do not have a SOC team, security incidents need to be handled by this team, and cases that require...

The rest of the chapter is locked

You're reading from Windows Ransomware Detection and Protection Securing Windows endpoints, the cloud, and infrastructure using Microsoft Intune, Sentinel, and Defender

Table of Contents (16) Chapters

Threat management

Authors (1)

Personalised recommendations for you

You're reading from Windows Ransomware Detection and Protection Securing Windows endpoints, the cloud, and infrastructure using Microsoft Intune, Sentinel, and Defender

Table of Contents (16) Chapters

Threat management

Unlock this book and the full library FREE for 7 days

Authors (1)

Personalised recommendations for you