A nice new option I just noticed in Defender for Endpoint web filtering. As shown above, you can now block users navigating to newly registered domains and parked domains that can be used for phishing attacks.
To set this, navigate to Settings, the under Rules select Web content filtering and create or adjust a policy to include all the Uncategorized options as shown above.
Cool feature
Do we have a list of the lists Microsoft Used for the reputation/categorization of sites/URLs
Thanks
LikeLike
This service is provided by a third party – Cyren. You need to go there to determine the specifics but I doubt they will tell as then the bad actors can work around these types of lists.
LikeLike
Microsoft no longer uses Cyren. They have switched to Incompass from Netstar some time ago. In contrast to Cyren it is less obvious what the lists are that Netstar maintains.
LikeLike
Is there any documentation on that fact?
LikeLike
https://is.gd/ozMyza
it is still not documented that well (probably because it is still preview?), but you can find several threads on this.
I pasted one above.
LikeLike
Thanks a lot Guys
LikeLike