This emerging trend of fileless attacks, which compose over 50% of all threats, are extremely dangerous, constantly changing, and designed to evade traditional AV. Despite advances in antivirus detection capabilities, attackers are continuously adapting and have been expanding their arsenal of tricks and techniques to compromise endpoints, steal credentials, and execute ransomware attacks without ever needing to write anything to disk. Traditional antivirus technologies are an integral aspect of the endpoint security stack through the identification and removal of malicious executables using a combination of cloud-based machine learning and heuristics. The four components of Windows Defender Exploit Guard are designed to lock down the device against a wide variety of attack vectors and block behaviors commonly used in malware attacks, while enabling enterprises to balance their security risk and productivity requirements.

Windows Defender Exploit Guard is a new set of intrusion prevention capabilities that ships with the Windows 10 Fall Creators Update.

Microsoft Purview Data Lifecycle Management.

Microsoft Purview Information Protection.

Information protection Information protection.

Microsoft Priva Subject Rights Requests.

Microsoft Purview Communication Compliance.

Microsoft Purview Insider Risk Management.

Risk management & privacy Risk management & privacy.

Endpoint security & management Endpoint security & management.

Microsoft Defender External Attack Surface Management.

Microsoft Defender Cloud Security Posture Mgmt.Microsoft Defender Vulnerability Management.Azure Active Directory part of Microsoft Entra.

Windows controlled folder access