New Microsoft Defender ATP Capability Blocks Malicious Behaviors

The new capability called "EDR in block mode" aims to detect threats through behavior analysis, providing organizations with real-time protection, even after a threat has been executed.