Microsoft Defender now monitors RPC activity

Remote procedure call (RPC) is a protocol commonly abused by attackers that allows functions implemented in a separate process, and potentially on a remote machine,…

A short excerpt. Read the linked source for the full article and context.

Monitored guidance in the same product area; this does not establish that the article cites each page.

• Defender unified RBAC permissions
• Defender for Endpoint streamlined connectivity URLs
• Defender for Endpoint streamlined connectivity
• Defender for Endpoint network connectivity and service URLs
• Defender for Endpoint API release notes