Rob Lefferts (@Rob_Lefferts) header
Rob Lefferts (@Rob_Lefferts) profile picture

Cybersecurity at Microsoft. Help people and keep them safe.

Joined March 2017
Photo by Rob Lefferts (@Rob_Lefferts)Photo by Rob Lefferts (@Rob_Lefferts)Photo by Rob Lefferts (@Rob_Lefferts)Photo by Rob Lefferts (@Rob_Lefferts)Photo by Rob Lefferts (@Rob_Lefferts)Photo by Rob Lefferts (@Rob_Lefferts)Photo by Rob Lefferts (@Rob_Lefferts)Photo by Rob Lefferts (@Rob_Lefferts)Photo by Rob Lefferts (@Rob_Lefferts)
Multiple ransomware groups that have been accumulating access and maintaining persistence on target networks for several months activated dozens of ransomware deployments in the first two weeks of April 2020.
3
94
4
172
Great analysis.
Which Ransomware payload is deployed at the end of a killchain is pretty much a stylistic choice by the attackers. Human Operated Ransomware campaigns overlap in their entry vectors, C2 tools, and lateral movement techniques- and also in viable defenses. aka.ms/human-operated-ransom…
2
1
Our threat intelligence shows that COVID-19-themed threats are retreads of existing attacks slightly altered to tie to the pandemic. We’re seeing a changing of lures, not a surge in attacks. We’re actively monitoring & responding to this shift in focus. msft.it/6014TeFIp
3
128
10
184
My first laptop sticker ever.
12
74
Microsoft Threat Protection – #AzureSentinel and #Microsoft365 Threat Protection. Presented by @Rob_Lefferts and filmed at #MSIgnite. Click link to watch: youtube.com/watch?v=Q-kkasdS… #security #Azure #mdatp #infosec #cybersecurity #threatprotection
We’re extending our endpoint detection and response capability (EDR) in Microsoft Defender ATP to include MacOS, now in preview. We’re also planning to add support for Linux servers. microsoft.com/security/blog/…
6
48
3
130
Just got done!!!! @dispensa and I just did the security opener for Ignite 2019. An amazing amount of news and ideas to cover, but I think we brought it home. Everyone enjoy the week of getting deeper into security at Microsoft!
1
1
32
Yes! It's almost time!
Happening next Tuesday, Nov. 5 at #MSIgnite, click the link and join @Rob_Lefferts for the session: Microsoft Threat Protection with security CVP Rob Lefferts. #Microsoft #CyberSecurity #InfoSec #Security myignite.techcommunity.micro…

4
Yeah! I got my CTL over 40! I really don't understand what this number means, but who cares. It's a metric and I've been working on it since July. So...Woo-Hooo!!! 41 somethings!!!! (Yeah?)
2
15
Big, big deal. Just one word change, (and a ton of engineering work :) ) but this really speaks to how we think about embracing the breadth of customer environments.
With the introduction of native cross platform support, Windows Defender ATP becomes Microsoft Defender ATP
1
53
8
167
This is really going to make a difference for defenders --- block that next attack before it even happens.
Threat & Vulnerability Management in Microsoft Defender ATP youtu.be/JuSm8adfYaY via @YouTube
4
1
17
Comparative coverage #WDATP and other on critical techniques in the recent @MITREattack APT-3 test. Read the full article at aka.ms/AA4jct4
Personal best lifetime accomplishment: actually used a pen all the way down to zero ink. Previous attempts have always resulted in “lost pen.” So proud...
5
3
1
40
Shout out to @Ryen_Mac in the opening keynote video for @ajohnsocyber in #RSA2019 . Really nice job.
1
2
18
More great RSA news.
The #MicrosoftGraphSecurity API is making security integration simpler, faster, better. See what's new at #RSAC. aka.ms/graphsecurityrsa2019
1
7
Check it out!
Microsoft CVP @Rob_Lefferts shares the latest updates on our work in security, including how we lead integration across the industry, new capabilities that take advantage of cloud and AI, and securing IoT. Learn more and connect with Microsoft at #RSAC. msft.social/ahyFAD
3
15
📢 Announcing Microsoft Threat Experts! 📢 This new service in WDATP provides proactive hunting, prioritization & additional context/insights that further empower security operations centers to identify and respond to threats quickly and accurately.
2
21
2
54
SE Labs' Enterprise Endpoint Protection
2
37
5
71