Microsoft Defender Antimalware Platform

Reported Context (77)

that uses Microsoft's app intelligence services and code integrity features and works alongside Microsoft Defender and SmartScreen to block potentially harmful apps or binaries. Microsoft warns October Windows update may prevent users from enabling Smart App Control
It also modifies Windows Update and Microsoft Defender settings. Detecting REVSTEALER Activity and Automating File Removal With Wazuh
The category is no longer purely theoretical. Microsoft, for example, now documents an ISOC experience in Microsoft Defender that brings together XDR, SIEM, threat intelligence, automation and AI capabilities. What Integrated Security Operations Mean for the SOC
Microsoft Defender Microsoft October 2026 Updates Fix 1,411 Flaws, Including Three Zero-Days
ANY.RUN provides integrations with platforms including Microsoft Sentinel, Microsoft Defender, Splunk, Cortex XSOAR, IBM QRadar, MISP, TheHive, ThreatConnect, Tines, Torq, and others. Wazza Phishing Kit Uses Layered Routing to Target Organizations Across Three Regions

CVE (1322)

Malware (164)

People (92)

Threat Actors (62)

MITRE ATT&CK (205)

Vendors (109)

Products (410)

Tools (114)

Industries (33)

Countries (20)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.