Detecting the DFSCoerce attack June 21, 2022 by Gianni Castaldi detection kusto-query-language level-200 defender-for-endpoint kql Today the threat researcher Filip Dragovic released a new PoC: DFSCoerce for us all to play with. I tested the PoC against a Microsoft Defender for Endpoint tenant to see if and how it is detected.... Read full article →