))
Inside Microsoft GHOST with Matt Zorich – Exploring Threat Hunting
Manage episode 439361609 series 3569217
Content provided by Threatscape. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Threatscape or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.
In this episode of ThreatCast , Ru and Matt dive deep into the world of Microsoft GHOST, a specialised team focused on cybersecurity hunting within Microsoft. Matt explains the role of the DoD (Detection and Response Team), their work on incident response for customers dealing with ransomware and nation-state attacks, and how Microsoft telemetry plays a crucial role in detecting and mitigating threats.
They also discuss current trends in the cybersecurity landscape, including token theft, adversary-in-the-middle attacks, and the importance of mandatory MFA (Multi-Factor Authentication) for securing Azure and Intune admin portals. Matt shares his insights on how these measures, along with KQL, are helping Microsoft and its customers stay ahead of evolving threats.
ThreatCast podcast is produced by Threatscape.
Our mission is to provide a secure and certain future for our clients. Keeping them protected so that they can go about their business is how we know we’re delivering on our promise.
Contact us
Email Address : info@threatscape.com
Thanks for listening & keep podcasting!
12 episodes
Share
