security: Case study: How predictive shielding in Defender stopped GPO-based ransomware before it started

Microsoft Defender stopped a human-operated ransomware attack that used Group Policy Objects (GPOs) to disable defenses and push encryption. Predictive shielding hardened 700 devices in time, preventing any GPO-based encryption and blocking most of the attempted impact.

• Source: Microsoft Security Blog