Installing and using DTrace, a dynamic tracing framework that allows an admin or developer to get a real-time look into a system either in user or kernel mode. Using these dynamically inserted trace points, you can filter on conditions or errors, write code to analyze lock patterns, detect deadlocks, etc. https://techcommunity.microsoft.com/t5/Windows-Kernel-Internals/DTrace-on-Windows/ba-p/362902
Announcing the public preview of Microsoft Windows Virtual Desktop. Now, all customers can access this service—the only service that delivers simplified management, a multi-session Windows 10 experience, optimizations for Office 365 ProPlus, and support for Windows Server Remote Desktop Services (RDS) desktops and apps. With Windows Virtual Desktop, you can deploy and scale your Windows desktops and apps on Azure in minutes and enjoy built-in security. https://www.microsoft.com/en-us/microsoft-365/blog/2019/03/21/windows-virtual-desktop-public-preview
On this [Microsoft Mechanics] show (12:43), we’ll take a closer look at Windows Virtual Desktop, now in public preview. See how you can give your users the only Windows 10 multi-session experience virtualized in the cloud and available on any device. Scott Manchester demonstrates how WVD delivers the best Office experience with multi-session virtual scenarios that virtualize persistent storage in a multi-session environment. Keep watching for a sneak peak of the next generation admin experience for WVD in the Azure portal. https://www.youtube.com/watch?v=30dOLcZ4_9U
In this [Microsoft Mechanics] show (16:17), CVP Brad Anderson demonstrates cold-booting his personal, highly-managed and secured Windows 10 device in under 20 seconds. We’ll also show new options to get to managed remote Windows sessions and apps across devices using the new Windows Virtual Desktop. And we show new streamlined management experiences for Microsoft 365 administrators as well as what you can do to set baseline protections and device configurations quickly using built-in Security Baselines in Microsoft Intune. https://www.youtube.com/watch?v=V1YfK0Kdhzs
On November 29, 2018, MITRE published the results of their evaluation of several endpoint detection and response (EDR) solutions, testing them against a chain of attack techniques commonly associated with the APT3 activity group. MITRE avoided direct vendor comparisons, but this has not prevented participating vendors from claiming victory and leveraging the results in aggressive marketing campaigns. The evaluation highlighted Windows Defender Advanced Threat Protection’s (Windows Defender ATP) distinct, superior capabilities when compared with other participating vendors. https://techcommunity.microsoft.com/t5/Windows-Defender-ATP/MITRE-evaluation-highlights-industry-leading-EDR-capabilities-in/ba-p/369831
Microsoft Intune security tasks extend Microsoft Defender ATP’s Threat & Vulnerability Management. Effectively identifying, assessing, and remediating endpoint weaknesses is pivotal in running a healthy security program and reducing organizational risk. Today, we are happy to introduce Microsoft Intune security tasks, a new one-click remediation capability in Microsoft 365 that bridges security stakeholders—security administrators, security operations, and IT administrators—by allowing them to collaborate and seamlessly remediate threats. This capability will extend the newly announced Microsoft Defender Threat & Vulnerability Management (TVM), a new component of Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP, previously Windows Defender ATP) that uses a risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. https://techcommunity.microsoft.com/t5/Enterprise-Mobility-Security/Microsoft-Intune-security-tasks-extend-Microsoft-Defender-ATP-s/ba-p/369857
Introducing a risk-based approach to threat and vulnerability management. Threat & Vulnerability Management, a new, built-in capability that uses a risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. This capability is coming to Microsoft Defender Advanced Threat Protection (ATP), our industry-leading unified endpoint security platform with an updated name that reflects the newly announced expanded coverage. https://techcommunity.microsoft.com/t5/Windows-Defender-ATP/Introducing-a-risk-based-approach-to-threat-and-vulnerability/ba-p/377845
Announcing Microsoft Defender ATP for Mac. Today, we’re announcing our advances in cross-platform next-generation protection and endpoint detection and response coverage with a new Microsoft solution for Mac. Core components of our unified endpoint security platform, including the new Threat & Vulnerability Management also announced today, will now be available for Mac devices. https://techcommunity.microsoft.com/t5/Windows-Defender-ATP/Announcing-Microsoft-Defender-ATP-for-Mac/ba-p/378010
Tamper protection in Microsoft Defender ATP is a new setting available which provides additional protections against changes to key security features, including limiting changes that are not made directly through the app. Enabling this feature prevents others (including malicious apps) from changing important protection features such as (a) Real-time protection, (b) Cloud-delivered protection, (c) IOAV, (d) Behavior monitoring. The feature also prevents the deletion of security intelligence updates and the disabling of the entire antimalware solution. https://techcommunity.microsoft.com/t5/Windows-Defender-ATP/Tamper-protection-in-Microsoft-Defender-ATP/ba-p/389571
Announcing the Open Sourcing of Windows Calculator. This includes the source code, build system, unit tests, and product roadmap. Our goal is to build an even better user experience in partnership with the community. We are encouraging your fresh perspectives and increased participation to help define the future of Calculator. https://blogs.windows.com/buildingapps/2019/03/06/announcing-the-open-sourcing-of-windows-calculator
Find my device is a feature introduced in the 2015 Windows 10 update, allows you tolocate your Windows device if it goes missing. The best part about Find my device is that it’s completely safe to use, and automatically included in Windows 10. https://community.windows.com/en-us/stories/microsoft-find-my-device
Microsoft Mechanic’s video (11:43) on an early look at Microsoft Threat Protection. Harnesses trillions of threat signals from the Microsoft Intelligent Security Graph to secure your workplace using Microsoft Threat Protection. Security CVP Rob Lefferts shows you the unified single consul for visibility of security threats across your identities, endpoints, email, user data, SaaS apps, infrastructure and more. https://youtu.be/3ge1aAm1jX0
t3chn1ck 