4 ms·
The reason the Windows Defender is so good these days is https://docs.microsoft.com/en-us/graph/security-concept-overview https://docs.microsoft.com/en-us/graph
by goatinaboat 7y ago
The reason the Windows Defender is so good these days is https://docs.microsoft.com/en-us/graph/security-concept-overview https://docs.microsoft.com/en-us/graph/security-concept-over...
The idea is everyone pools their threat data and immunity to new threats can be rapidly disseminated via Azure. The time window any new malware has to exploit Windows 10 anywhere in the world is measured in 10s of minutes now. It’s impressive stuff. The ISG can spread immunity much faster than malware can spread itself.
Of course wearing my cynics hat, they never bothered to backport it to Windows XP and that’s why the NHS was hit with WannaCry. But the other side is that they had plenty of time to upgrade...
- heavenlyblue 7y agoHow does it help against new threats exactly, if they are not auto-detected in the first place?
- goatinaboat 7y agoSuspicious files - if you fully buy into the solution - are uploaded to Azure and “controlled detonation” in a VM assesses if they’re malware. Then a signature is generated and distributed. It’s super slick. MS are serious about rehabilitating their security reputation.