Jussi Metso
@jussimetso.com
180 followers
120 following
78 posts
*Microsoft Security MVP
*Azure & M365 & AI Security
*Blogger @ jussimetso.com
*Co-founder of https://www.meetup.com/microsoft-security-user-group-finland/
Posts
Media
Videos
Starter Packs
Jussi Metso
@jussimetso.com
· 27d
Hackers Use DFIR Tool 'Velociraptor' to Attack VMware ESXi and Windows Servers with Ransomware
Security researchers at Cisco Talos have confirmed that ransomware operators are actively exploiting Velociraptor, an open-source digital forensics and incident response (DFIR) tool, in their attacks.
cybersecuritynews.com
Jussi Metso
@jussimetso.com
· Oct 1
New EDR-Freeze tool uses Windows WER to suspend security software
A new method and proof-of-concept tool called EDR-Freeze demonstrates that evading security solutions is possible from user mode with Microsoft's Windows Error Reporting (WER) system.
www-bleepingcomputer-com.cdn.ampproject.org
Jussi Metso
@jussimetso.com
· Sep 17
Malware automated remediation in Defender for Storage
Defender for Storage now supports different ways to handle malicious files. Now you can select the remediation option that fits your scenario. Built-in remediation capabilities Automated workflows …
www.jussimetso.com
Jussi Metso
@jussimetso.com
· Aug 28
Hackers Abuse Microsoft Teams to Gain Remote Access on Windows With PowerShell-based Malware
Cybercriminals are increasingly weaponizing Microsoft Teams, exploiting the platform's trusted role in corporate communications to deploy malware and seize control of victim systems.
cybersecuritynews.com
Jussi Metso
@jussimetso.com
· Jul 4
Modernizing your on-prem SIEM with Microsoft Sentinel – part 2
So you want to migrate your on-prem SIEM to Microsoft Sentinel?What kind of tasks you have thought so far? Some planning maybe?Here are some task what I have in my mind. These are just tasks, no ne…
www.jussimetso.com
Jussi Metso
@jussimetso.com
· May 27
Defender for Cloud – Part 11: Data and AI Security
The Data and AI security overview section displays your cloud data and AI estate for each cloud. It includes all data and AI resources, categorized into storage assets, managed databases, hosted da…
www.jussimetso.com
Jussi Metso
@jussimetso.com
· May 10
Defender for Cloud – Part 10.5: CWP Advanced protection
Advanced Threat Protection provides a new layer of security, which enables customers to detect and respond to potential threats as they occur by providing security alerts on anomalous activities.
www.jussimetso.com
Jussi Metso
@jussimetso.com
· Apr 24
Defender for Cloud – Part 10: Cloud Workload protection (CWP)
Cloud Workload Protection in Microsoft Defender for Cloud helps protect various cloud resources such as virtual machines, containers, databases, and applications from security threats, vulnerabilit…
www.jussimetso.com
Jussi Metso
@jussimetso.com
· Mar 13
Defender for Cloud – Part 9: Regulatory compliance
Microsoft Defender for Cloud provides Regulatory Compliance capabilities to help organizations assess and maintain compliance with industry standards, frameworks, and regulatory requirements. It co…
www.jussimetso.com
Reposted by Jussi Metso
Reposted by Jussi Metso
Jussi Metso
@jussimetso.com
· Feb 22
Defender for Cloud – Part 7: Cloud Security Explorer
The Cloud Security Explorer allows you to run graph-based queries and proactively identify security risks in your cloud environment. You can query effective exposure to internet, permisisons, vulne…
www.jussimetso.com
Jussi Metso
@jussimetso.com
· Feb 14
Storm-2372 conducts device code phishing campaign | Microsoft Security Blog
Microsoft Threat Intelligence Center discovered an active and successful device code phishing campaign by a threat actor we track as Storm-2372. Our ongoing investigation indicates that this campaign ...
www.microsoft.com