Main Stage: Unmasking Cyber Villains: How Microsoft Stays Ahead of the World's Most Dangerous Hackers

No ratings

Presented at Black Hat USA 2025 by

Sherrod DeGrippo

Aarti Borkar

Andrew Rapp

Simeon Kakpovi

What does it take to stay one step ahead of the world's most advanced cyber threats? At Microsoft, it means eliminating internal silos and turning intelligence into action, faster than ever before. Go behind the scenes with Microsoft's threat intelligence, incident response, and threat hunting leaders. Learn how these functions operate as a unified force, creating a real-time feedback loop that enables Microsoft to detect, disrupt, and outpace sophisticated actors like Star Blizzard and Mint Sandstorm. Attendees will learn: -The techniques Microsoft's threat hunters use to uncover hidden malicious activity across global telemetry in near real-time -Ways intelligence teams attribute nation-state groups and track shifting tactics, techniques, and procedures (TTPs) -How the world's largest bug bounty program feeds Microsoft's detection capabilities and enhances threat intelligence shared across the global defender community Attendees will walk away with a clear view of what it takes to track the most elusive actors, lessons from real intrusions, and how Microsoft translates threat signals into global protection.Open to all Pass types (excluding Summit-only Passes).