Defender for Endpoint: Cryptographic Identity Baselining Hunting Query for Process Network Anomalies
New hunting query detects first-time network connections by processes using cryptographic signer baselining to defeat DLL sideloading and BYOTA attacks. Read More →