We’re excited to introduce Microsoft Threat Experts, an additional layer of expertise and optics that Microsoft customers can utilize to augment security operations capabilities as part of Microsoft 365. This new managed threat hunting service in Microsoft Defender Advanced Threat Protection provides proactive hunting, prioritization, and additional context and insights that further empower security operations centers (SOCs) to identify and respond to threats quickly and accurately.
Microsoft Threat Experts enables SOCs to jump-start threat investigations by providing context-rich intelligence. This release of the service includes 2 capabilities:
- Targeted attack notifications: Alerts that are tailored to organizations provide as much information as can be quickly delivered to bring attention to critical threats in their network, including the timeline, scope of breach, and the methods of intrusion.
- Experts on demand: When a threat exceeds the SOC’s capability to investigate, or when more actionable information is needed, security experts provide technical consultation on relevant detections and adversaries. In cases where a full incident response becomes necessary, seamless transition to Microsoft incident response (IR) services is available.
…
Read more about the service here:
- RELEASE: Experts on demand is generally available
https://www.microsoft.com/security/blog/2019/10/28/experts-on-demand-your-direct-line-to-microsoft-security-insight-guidance-and-expertise/ - RELEASE: Microsoft Threat Experts reaches General Availability
https://techcommunity.microsoft.com/t5/microsoft-defender-atp/microsoft-threat-experts-reaches-general-availability/ba-p/502493 - ANNOUNCMENT: Announcing Microsoft Threat Experts
https://www.microsoft.com/security/blog/2019/02/28/announcing-microsoft-threat-experts/ - DOCS: Microsoft Threat Experts
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/microsoft-threat-experts
kurtsh
Kurt Shintaku's Blog 