Windows Ransomware Detection and Protection

7

Protecting Information Using Azure Information Protection and Data Protection

In recent years, most ransomware attacks have changed from just encrypting data to encrypting and exfiltrating data. The reason is that most companies realized that they just needed to restore their encrypted files from a backup, which meant that the ransomware group did not get any payment. Therefore, to increase the probability of getting paid, ransomware groups have started exfiltrating any data they can find.

In this chapter, we will look at how to use services to encrypt data to reduce the risk of data getting in the wrong hands. We will take a closer look at some of the built-in services in Windows and Azure Information Protection (AIP) and lastly look at some ...