Microsoft Incident Response Ninja Hub

We are excited to announce the Microsoft Incident Response Ninja Hub. This page contains guides and resources developed by the Microsoft Incident Response team on threat hunting, case studies, incident response guides, and more. Many of these materials have been developed in collaboration with Microsoft partners across Microsoft Security, providing a unique perspective on how the Microsoft Security ecosystem relies on cross-team collaboration to protect customers.

This page will be continually updated as the team develops and publishes more resources, so bookmark Ninja Hub to stay informed. https://aka.ms/MicrosoftIRNinjaHub

Incident Response (IR) Best Practices for Security Teams and Leaders

Deep Dive and Threat Hunting Guide

• 1 page guide
• Cloud Hunting and Microsoft Entra
• Threat hunting techniques

Description of attacker tactics, techniques, and procedures

Case study

• Cyber ​​Attack Series
• Advanced Persistent Threats (APTs) and Named Threat Actor Groups
• Ransomware and Case Studies

Lessons learned from the field and how to recover from compromise

Long texts and books

Learn more about the Microsoft Incident Response team

Follow our published blog to get the latest updates. Security Professional Technology Community Blog and Microsoft Security Blog.