Rob Lefferts

Cybersecurity at Microsoft. Help people and keep them safe.

[Rob Lefferts @Rob_Lefferts]

@Ryen_Mac I just construct all my sentences to be intentionally ambiguous. "Multiple customers have on-premises deployments." Leave everyone guessing: was I using it correctly, or incorrectly pluralizing? I'll never tell....

[Rob Lefferts @Rob_Lefferts]

@jeffteper @AdamHarmetz Yeah. Difficult and valuable career lessons. On the list of “good things to avoid.”

[Dallas 🖤 @dallas__g]

.@lilyhnewman @WIRED spoke with @Rob_Lefferts @msftsecurity to learn about new research on ransomware groups targeting healthcare services during #COVID19 tip: @Techmeme https://t.co/UZHEjH6T6Q

[Tanmay Ganacharya @tanmayg]

Multiple ransomware groups that have been accumulating access and maintaining persistence on target networks for several months activated dozens of ransomware deployments in the first two weeks of April 2020.

[Rob Lefferts @Rob_Lefferts]

@ElisOl Ahem. Public safety tip. Just this morning I forgot I was sharing my screen and then proceeded to share my side-channel with the whole meeting. Sigh. Nothing too terrible, but definitely Maintaining That Professional Demeanor.

[Rob Lefferts @Rob_Lefferts]

@ElisOl I've been doing this as side-channel discussions during bigger meetings. Which doesn't help me actually focus on the current meeting... I start chatting with other attendees in the meeting about "random things on my mind." Soon they will call me the Randomizer. (If not already.)

[Rob Lefferts @Rob_Lefferts]

Great analysis.

[Jessica Payne @jepayneMSFT]

Which Ransomware payload is deployed at the end of a killchain is pretty much a stylistic choice by the attackers. Human Operated Ransomware campaigns overlap in their entry vectors, C2 tools, and lateral movement techniques- and also in viable defenses. https://t.co/3Vcjnx8PMZ

[Microsoft Threat Intelligence @MsftSecIntel]

Our threat intelligence shows that COVID-19-themed threats are retreads of existing attacks slightly altered to tie to the pandemic. We’re seeing a changing of lures, not a surge in attacks. We’re actively monitoring & responding to this shift in focus. https://t.co/3yjfPxE8oj

[Rob Lefferts @Rob_Lefferts]

@PieterWigleven Fabulous on so many levels.

[Rob Lefferts @Rob_Lefferts]

My first laptop sticker ever.

[Microsoft Mechanics @MSFTMechanics]

Microsoft Threat Protection – #AzureSentinel and #Microsoft365 Threat Protection. Presented by @Rob_Lefferts and filmed at #MSIgnite. Click link to watch: https://t.co/H5puBCBUh7 #security #Azure #mdatp #infosec #cybersecurity #threatprotection

[Tanmay Ganacharya @tanmayg]

We’re extending our endpoint detection and response capability (EDR) in Microsoft Defender ATP to include MacOS, now in preview. We’re also planning to add support for Linux servers.

https://t.co/DvRhOCbiiP

[Rob Lefferts @Rob_Lefferts]

Just got done!!!! @dispensa and I just did the security opener for Ignite 2019. An amazing amount of news and ideas to cover, but I think we brought it home. Everyone enjoy the week of getting deeper into security at Microsoft!

[Rob Lefferts @Rob_Lefferts]

@ajohnsocyber @dondiwest @aiddya I've had it a couple days now. Used it yesterday all day (conference level usage, which is super high) with no charging. It was doing better than my phone. Plus SIM. Plus pen with charging dock. Plus Secured Core OS. It's what I've been looking for my whole life.

[Rob Lefferts @Rob_Lefferts]

@steve_newby @Gartner_inc Yes.

[Rob Lefferts @Rob_Lefferts]

Yes! It's almost time!

[Microsoft Mechanics @MSFTMechanics]

Happening next Tuesday, Nov. 5 at #MSIgnite, click the link and join @Rob_Lefferts for the session: Microsoft Threat Protection with security CVP Rob Lefferts. #Microsoft #CyberSecurity #InfoSec #Security https://t.co/YFExFgGHQN

[Rob Lefferts @Rob_Lefferts]

Yeah! I got my CTL over 40! I really don't understand what this number means, but who cares. It's a metric and I've been working on it since July. So...Woo-Hooo!!! 41 somethings!!!! (Yeah?)

[Rob Lefferts @Rob_Lefferts]

@JenMsft @mairacw @ajohnsocyber Urgh. Bummer.

[Rob Lefferts @Rob_Lefferts]

@depletionmode @WindowsATP David, you rock. Thanks for being on the team.