家庭用户以及企业和企业都可能发生勒索软件攻击。如果任其发展，勒索软件可能会导致巨大的金钱损失。用户的隐私一直是微软^(Microsoft)关注的主要问题之一，因此该公司昨天发布了新的勒索软件响应手册^{(Ransomware Response Playbook)}，该手册解决了勒索软件问题，并^(Ransomware)解释了企业如何使用Windows Defender ATP来检测、检查、删除和避免勒索软件威胁在他们的网络中。

勒索软件响应手册

勒索软件响应手册^{(Ransomware Response Playbook)}提供了有关企业如何检测勒索软件并在Windows Defender 高级威胁防护^{(Windows Defender Advanced Threat Protection)}的帮助下将其删除的详细信息。为了很好地说明，该剧本使用了 Cerber-Ransomware，这是一种实际的勒索软件感染，一年多来一直是亮点。

该剧本涵盖以下主题 -

发现和缓解勒索软件 - 发现勒索软件和管理警报的几种^{(Ransomware- Several)}方法。它还包括如何隔离受感染的机器以避免传播。
调查交付和到达 -勒索软件如何^(How)交付到您的网络以及常见的感染模式。
确定事件范围并检查感染是否传播到连接到您网络的其他计算机。
防范勒索^(Protection)软件^(Ransomware)，包括电子邮件传播的勒索软件、通过网络浏览器登陆的感染等等。
增强网络上的端点防御 - 本节介绍如何增强计算机上的保护。
阻止恶意域、IP^(IPs)和URL - 了解^{(URLs- Learn)}阻止恶意域如何防止您的计算机受到这种攻击。
从勒索软件感染中恢复您的机器 - 该电子书将指导您如何从您的机器中删除整个威胁组件，并防止它们在通过同一网络连接的其他机器中传播。

该电子书还包含参考链接，您可以在其中了解有关勒索软件攻击^{(Ransomware attacks)}以及规避这些攻击和感染的方法的更多信息。

该电子书可在Microsoft免费下载。只需^(Just)单击下载按钮并使用网络浏览器或 PDF 阅读器阅读即可。

Microsoft 发布了一份白皮书，其中讨论了 Windows 10 v1703 如何提供强大的勒索软件保护以始终保护您的计算机。您可能也想下载它。^{(Microsoft has released a whitepaper which talks about how Windows 10 v1703 offers strong ransomware protection to keep your computer protected at all times. You might want to download it too.)}

Ransomware Response Playbook shows how to deal with the malware

Ransomware attacks саn happen tо both home users as well as corporate and enterprises. A ransomware can result in huge monetary losses if left unabated. Users’ privacy has been one of the major concerns at Microsoft and thus the company yesterday released its new Ransomware Response Playbook which addresses the issue of Ransomware and explains how enterprises can use the Windows Defender ATP to detect, examine, remove and avoid the ransomware threats in their networks.

Ransomware Response Playbook

The Ransomware Response Playbook provides a detailed information on how the enterprises can detect the ransomware and remove it with the help of Windows Defender Advanced Threat Protection. To illustrate well, the playbook uses Cerber-Ransomware, an actual ransomware infections which has been into highlights for more than a year now.

The playbook covers following topics-

Discovering and mitigating Ransomware- Several ways of discovering ransomware and managing alerts. It also includes how you can isolate your infected machine so as to avoid spreading.
Investigating the delivery and arrival- How the ransomware is delivered to your network and the common infection patterns.
Scope the incident and check if the infection is spread to other machines connected to your network.
Protection against Ransomware which includes the email-borne ransomware, infection that lands through web browsers and more.
Enhancing the endpoint defenses on your network- This section shows how you can enhance protection on your machines.
Blocking malicious domains, IPs and URLs- Learn how blocking the malicious domains can prevent your machines from this attack.
Recovering your machine from ransomware infection- The eBook guides you about how to remove the entire threat components from your machine and prevent them spreading in other machines connected via the same network.

The eBook also includes references links where you can learn more about the Ransomware attacks and the methods to evade those attacks and infections.

The eBook is available for free download at Microsoft. Just click on the download button and read it using a web browser or a PDF reader.

Microsoft has released a whitepaper which talks about how Windows 10 v1703 offers strong ransomware protection to keep your computer protected at all times. You might want to download it too.

刚朱

About the author

我是一位经验丰富的软件工程师，在 Windows Phone 和 Office Space 行业拥有超过 10 年的经验。我的技能包括使用传统的文本和图像格式，以及为最新的移动设备进行开发。我在提供优质服务方面有着良好的记录，并且我总是愿意帮助他人实现他们的目标。

勒索软件响应手册展示了如何处理恶意软件

勒索软件响应手册

Ransomware Response Playbook shows how to deal with the malware