Microsoft Defender Advanced Threat Protection
Security service, which allows to detect, investigate and anticipate serious targeted attacks on internal networks.
Advanced Threat Protection is focused on advanced cyberattacks. In order to search abnormal activity, current Microsoft security technologies and expert knowledge are applied.
After detection of violations, a detailed information about scales of threats and correlation with other important factors help to define type of attack, the way it will behave and choose the best way to respond to new and more complex attacks.
Benefits Microsoft Defender Advanced Threat Protection
Search of attacks which passed through all levels of protection
Simple analysis of penetration scales
Integrated unique data base to analyze threats
Determination of complex attacks
Extended chronological scale to eliminate and investigate effects
Analytics of threats investigation
Functionality Microsoft Defender Advanced Threat Protection
System allows to investigate tools, techniques, procedures applied by hackers and form a notification if the collected data have features of behavior of malicious code or hacker.
Cloud security analytics service
It allows to transform behavioral signals in analytical data to detect threats and helps to determine ways to address them.
Endpoint behavioral sensors Integrated
Integrated sensors allow to collect and process behavioral signals of users from operation system and transfer data about appropriate events and actions to isolated cloud server. It allows to determine abnormal behavior of users or malwares and respond to them in time.