What this demo shows
- Controlled folder access, tamper protection and ASR rules on a file server
- Device isolation and contain-user actions from the incident page
- A recovery and hardening checklist for Microsoft-protected environments
Status
The recording and detection notes will be published here once the scenario is complete.