6.2 Ransomware attack investigation, MDE from Zero to Hero
Welcome to Microsoft Defender for Endpoint from Zero to Hero, Module 6.2 - Ransomware attack investigation
Today ransomware attacks represent a real threat to organizations in every industry independently of size or location. Check out the effect of a WannaCry attack on unprotected devices and how Defender for Endpoint works to prevent and provide all the insights related to the attack.
In this video you will see the following:
1 - Successful WannaCry attack
2 - Prevented WannaCry attack
3 - Alert investigation and actions
**COURSE OUTLINE**
I have plans to record 20+ videos and the course outline is not set in stone. Below are the modules already available and the ones on the horizon:
1. Product Overview - https://www.youtube.com/watch?v=Ul4Zx...
1.1 - Minimum requirements and licensing - • 1.1 Minimum requirements and licensing, MD...
2 - Design & key configuration
2.1 Design: MDE settings deployment - • 2.1 Design: MDE Settings Management, MDE f...
2.3 - Design - Best practise for full scan - • 2.3 - Design - Best practise for full scan...
2.10 Device tag overview - • 2.10 Device tag overview, MDE from Zero to...
2.11 Deploying device tag via portal, GPO and Intune - • 2.11 Deploying device tag via portal, GPO ...
2.12 - Device auto-tagging via Logic Apps - • 2.12 Device auto-tagging via Logic Apps, M...
3 - MDE deployment
3.1 - Initial setup and advanced settings - • 3.1 Initial setup and advanced settings, M...
3.2 - Deploying settings via MEM - • 3.2 Deploying AV settings via MEM, MDE fr...
3.3 - Deploying settings via GPO - • 3.3 Deploying AV settings via GPO, MDE fro...
4 - Onboarding
4.1 - Onboarding overview - • 4.1 Onboarding overview, MDE from Zero to ...
4.2 - Onboarding via GPO and local script - • 4.2 Onboarding via GPO and local script, M...
4.3 - Onboarding via Microsoft Endpoint Manager - • 4.3 Onboarding via MEM / Intune, MDE from ...
4.4 - Onboarding via helper script - • 4.4 Onboarding via helper script, MDE from...
4.5 - Auto Onboarding via Defender for Cloud
5 - Migration from 3rd party solution - • 5 .1 Migration from 3rd party solution, MD...
6 - Monitoring
6.1 - Alerts and incidents management - • 6.1 Alerts & incidents management, MDE fro...
6.2 - Ransomware attack investigation - • 6.2 Ransomware attack investigation, MDE f...
6.3 - Dealing with Ransomware via Sentinel automation - • 6.3 Dealing with Ransomware via Sentinel a...
7 - Integration with SIEM (Security Information and Event Management)
8 - Troubleshooting
8.1 - Troubleshooting mode deep dive - • 8.1 Troubleshooting mode deep dive, MDE fr...
8.2 - Troubleshooting PowerShell output issue - • 8.2 Troubleshooting PowerShell output issu...
My Microsoft Defender for Endpoint – From Zero to Hero playlist can be accessed from
• Introducing my Defender for Endpoint, from...
Please consider subscribing to my channel for the latest updates and upcoming modules.
Thanks for supporting this project, I hope you enjoy and learn a lot
Thanks for watching
Jackson Felden
#MicrosoftDefenderForEndpoint #MDE #CyberSecurity #ransomware #wannacry