#Microsoft Defender
All CosmicBytez Labs articles tagged #Microsoft Defender, across news, security advisories, how-to guides, and projects.
- News
Hackers Plant GSocket on Linux Servers for Persistent Access
Microsoft says multiple actors hide GSocket on Linux servers to keep access after patching; detections rose 356% since March. Audit cron and systemd.
- News
Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates
A GitHub PoC called BigDiskBuster fills disk space to block Microsoft Defender updates — no CVE, no patch exists.
- Newsletter
June 30 Digest: BlueHammer Zero-Day, Ransomware Goes Corporate, AI Supply Chain Risks & Nation-State ICS Threats
A Microsoft Defender zero-day fuels ransomware before any patch exists; researchers dissect how syndicate groups run HR departments and tiered pricing;...
- HOWTO
Microsoft Defender for Endpoint: Configuration and Hardening
Deploy and configure Microsoft Defender for Endpoint. Covers onboarding methods, ASR rules, network protection, EDR in block mode, and automated investigation.
- Project
Azure Sentinel SIEM Implementation
Deploy Microsoft Sentinel as your cloud-native SIEM with data connectors, analytics rules, workbooks, and SOAR automation for comprehensive security operations.