New tricks will help Microsoft Defender for Endpoint stop malware in its tracks

One thing most malware needs to do is reach out for further instructions to its command & control (C2) server. By catching this traffic before any information can be exchanged, Microsoft is hoping to stop many attacks in their tracks.

The company recently added a new feature to its Microsoft Defender for Endpoint (MDE) security platform that notifies administrators when a malicious connection is being established. It’s capable of killing that connection and logging the details for further evaluation.