Mapping internet-facing devices is often challenging since there is not a single indicator or logic used to determine that a device is accessible from the internet. New capabilities to map internet-facing devices By providing a view into internet-facing devices, security teams can better prioritize alerts, recommendations and incidents as internet-facing devices oftentimes become an adversary's entry point into the corporate network. T o help organizations extend their threat protection across internet -facing devices, Microsoft Defender for Endpoint will automatically map and flag onboarded devices that are exposed to the internet in the Microsoft 365 Defender portal, providing more context to security teams and deeper insights into device exploitability. However, security teams are faced with the challenges of identifying and prioritizing exposed devices to address the greatest threats on their most critical devices. Mapping your organization’s external attack surface is a key part of security posture management. These devices serve as highly accessible entry points to an organization’s environment. Threat actors are constantly scanning the internet to identify exposed devices, whether it’s part of an opportunistic malicious activity or a wider targeted campaign. We’re thrilled to announce the ability to discover internet-facing devices is now in public preview. To build on top of this work, we are expanding our device discovery capabilities through our existing network telemetry and RiskIQ integration. The revamped device inventory view gave SOC analysts visibility into all discovered devices, counts and functional features (such as, search) that enhanced the overall user experience. Last year, we announced the evolution of the device inventory view in Microsoft Defender for Endpoint.
0 kommentar(er)
