Microsoft Aims to Shift Security Game Board with New Defender Capabilities
Microsoft has announced new capabilities in its Defender tool aimed at helping defenders recapture the AI advantage over attackers. According to Rob Lefferts, corporate vice president for threat protection at Microsoft, this launch is a 'game changer' that can shift the game board in favor of the defense.
The integrated security operations center (ISOC) capabilities in Defender provide a data-driven view of what's going on in an estate and landscape, allowing teams to prioritize. Lefferts emphasized that even with agents, nobody will get everything done quickly, but getting important things done is crucial.
Lefferts noted that organizations have been tracking the rise of AI-powered threats for months and years, but many are not moving fast enough to prepare for attackers' access to frontier AI-level capabilities. He stated that ISOC provides 'the foundation you need' to take concrete steps to shore up defenses against AI-accelerated attacks.
ISOC combines Microsoft Sentinel SIEM capabilities with Defender's threat protection and XDR capabilities, making it easier for partners to protect customers who don't have the bandwidth to study the latest techniques being utilized by threat actors.