S01E42 - Advanced Threat Hunting with Microsoft Defender ATP (I.T)

00:00 - Intro 01:08 - Microsoft Defender Security Center discussion 07:31 - Live response session demo 12:45 - startupfolders command 16:20 - getfile/fileinfo command 22:22 - Investigate entities on devices using live response https://docs.microsoft.com/windows/se... 24:50 - Live response command examples https://docs.microsoft.com/windows/se... 25:22 - remediate command 31:50 - analyze command 35:40 - Timeline 37:17 - Security agents discussion 42:24 - Wrapping up Visit our websites and social media for more or to get in touch with us Steve Hosking - Microsoft EM+S MVP   / onpremcloudguy   http://steven.hosking.com.au/ https://mvp.microsoft.com/en-us/Publi... https://github.com/onpremcloudguy Adam Gross - Microsoft EM MVP   / adamgrosstx   https://www.asquaredozen.com https://github.com/AdamGrossTX https://mvp.microsoft.com/en-us/Publi... Ben Reader   / powers_hell   https://www.powers-hell.com/ https://github.com/tabs-not-spaces