Microsoft defense against ransomware, extortion, and intrusion

Learn how to better protect your organization from ransomware, extortion, and intrusion

Microsoft's top ransomware defense resources

Reference

• What is ransomware?
• Get ransomware incident response help from Microsoft
• Latest ransomware blogs
• Microsoft Defender XDR for in-depth ransomware investigation
• Use Microsoft Security Copilot for AI-enhanced ransomware defense

Frequently asked questions about ransomware - How Microsoft can help

Concept

• What are the stages in a ransomware attack?
• How do I detect pre-ransom activities?
• How do I back up and restore post ransomware attack?
• How do I proactively hunt for ransomware?
• How can I download a ransomware incident response playbook?

Prevalent ransomware trends

Reference

• Recent Microsoft Security ransomware blog
• Recent Microsoft ransomware social media posts
• Automatic disruption of ransomware attacks

Microsoft Blogs about ransomware

Reference

• Chinese threat actor Storm-0940 uses credentials from password spray attacks from a covert network - October 2024
• Ransomware as a service. Understanding the cybercrime gig economy and how to protect yourself
• Octo Tempest - A recurring ransomware threat
• Building an anti-ransomware program at Microsoft focused on an Optimal Ransomware Resiliency State

Protect against ransomware and extortion attacks with Microsoft

How-To Guide

• Ransomware attack overview
• Prepare your ransomware attack recovery plan
• Limit the scope of damage from a ransomware attack
• Make it hard for ransomware threat actors to access your environment

Microsoft products for defense against ransomware

Reference

• In Microsoft 365
• In Microsoft Security Copilot
• In Azure
• In Sentinel
• In SharePoint

Microsoft ransomware incident response playbooks

Reference

• Detecting human-operated ransomware with Microsoft 365
• Responding to ransomware attacks
• Ransomware Incident Response playbook template
• Azure Defenses for Ransomware Attack ebook