<story><title>An unexpected journey into Microsoft Defender&apos;s signature World</title><url>https://retooling.io/blog/an-unexpected-journey-into-microsoft-defenders-signature-world</url></story><parent_chain></parent_chain><comment><author>Angostura</author><text>A note to the author: if you are going to include “ EDR and EPP” in the intro, please spell them out on first use</text></comment>
<story><title>An unexpected journey into Microsoft Defender&apos;s signature World</title><url>https://retooling.io/blog/an-unexpected-journey-into-microsoft-defenders-signature-world</url></story><parent_chain></parent_chain><comment><author>FrostKiwi</author><text>Great deep dive! Always wondered about the details around this topic.&lt;p&gt;Did a bit of red teaming around the topic of reverse shells and privilege escalation and was pleasantly surprised, how much Windows Defender catches. Our IT Department recently switched away from a paid McAfee service doing end point security, which failed to detect unauthorized access in many instances.&lt;p&gt;Also, I totally read the intro as &amp;quot;addressing the ERP use-case&amp;quot;</text></comment>