Interactive Courses + DFIR NetWars Available During SANS Cyber Security Central in June. Save $300 thru 5/12.


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

Stop attacks and reduce security operations workload with automated cross-domain (XDR) security

  • Thursday, October 15, 2020 at 1:00 PM EDT (2020-10-15 17:00:00 UTC)
  • Tim Woolford, Zvi Ben Sheffer


  • Microsoft

You can now attend the webcast using your mobile device!



As the volume and complexity of attacks increases, defenders are overwhelmed with signal noise and alerts. It can take months, or simply be impossible, to analyze individual alerts from siloed security solutions, by which time the damage has been done. Join this session to learn about how Microsoft 365 Defender automatically analyzes, investigates and responds to threats across identities, endpoints, cloud apps, email and docs. Youll also discover how defenders can leverage the time saved to apply their unique expertise to hunting techniques across their data and putting preventative measures in place to keep attackers out.

Speaker Bios

Zvi Ben Sheffer

Zvi has over 20 years of industry experience in software development, cloud services & security. Zvi joined Microsoft in 2008. In 2015 Zvi joined the Windows Cyber Security engineering team, and for the last 2 years his focus has been Microsoft 365 Defender an integrated solution across collaboration, endpoint, identity, and apps. In his current position Zvi is focused on engineering driven customer engagements incubating new tech in the threat protection space.

Tim Woolford

Tim Woolford works in the Microsoft security product marketing team and specifically looks after Microsoft 365 Defender, our cross-domain security solution. Tim has spent the last 7 years around Microsoft security, artificial intelligence and IoT in both marketing and engineering roles and also has a decade of experience in financial services and global markets.

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.