{"id":95917,"date":"2022-03-17T11:20:36","date_gmt":"2022-03-17T02:20:36","guid":{"rendered":"https:\/\/softantenna.com\/blog\/?p=95917"},"modified":"2022-03-17T11:20:36","modified_gmt":"2022-03-17T02:20:36","slug":"microsoft-defender-office-update-malware","status":"publish","type":"post","link":"https:\/\/softantenna.com\/blog\/microsoft-defender-office-update-malware\/","title":{"rendered":"Microsoft Defender\u304cOffice\u66f4\u65b0\u3092\u30de\u30eb\u30a6\u30a7\u30a2\u3068\u307f\u306a\u3059\u5927\u5931\u614b\u767a\u751f"},"content":{"rendered":"

\"S<\/p>\n

Microsoft Defender for Endpoint\u304c\u3001Office\u30a2\u30d7\u30ea\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u3068\u3057\u3066\u691c\u51fa\u3059\u308b\u5927\u5931\u614b\u304c\u767a\u751f\u3057\u3066\u3044\u305f\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3057\u305f(Neowin<\/a>)\u3002<\/p>\n

\u554f\u984c\u306f\u7c73\u56fd\u6642\u959316\u65e5\u306e\u672a\u660e\u306b\u3001\u30b7\u30b9\u30c6\u30e0\u7ba1\u7406\u8005\u304cMicrosoft Defender for Endpoint\u3092\u6700\u65b0\u7248\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3057\u3001\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u306e\u30a2\u30e9\u30fc\u30c8\u306b\u6c17\u3065\u3044\u305f\u4e8b\u306b\u3088\u308a\u767a\u898b\u3055\u308c\u307e\u3059\u3002Microsoft\u306f\u3059\u3050\u306b\u554f\u984c\u3078\u306e\u5bfe\u51e6\u3092\u958b\u59cb\u3057\u3001\u30a2\u30e9\u30fc\u30c8\u304c\u8aa4\u691c\u51fa\u306b\u3088\u3063\u3066\u767a\u751f\u3057\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u307e\u3059\u3002<\/p>\n

Microsoft\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\uff06\u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u62c5\u5f53\u30d7\u30ea\u30f3\u30b7\u30d1\u30eb\u30fb\u30c6\u30af\u30cb\u30ab\u30eb\u30fb\u30b9\u30da\u30b7\u30e3\u30ea\u30b9\u30c8Steve Scholz(Reddit\u306e\u30e6\u30fc\u30b6\u30fc\u540dSteve_Scholz)\u6c0f\u306f\u3001\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u8aac\u660e<\/a>\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n

FYI
\nThis was a False\/Positive and has now been corrected. Please see the details below:<\/p>\n

Starting on the morning of March 16th, customers may have experienced a series of false-positive detections that are attributed to a Ransomware behavior detection in the file system. Microsoft has investigated this spike of detections and determined they are false positive results. Microsoft has updated cloud logic to suppress the false positives.<\/p>\n

Description
\n\u2022 Customers may have experienced a series of false-positive detections that are attributed to a Ransomware behavior detection in the file system.
\n\u2022 Microsoft has updated cloud logic to prevent future alerts being generated and to clear the previous false positives.<\/p>\n

\u53c2\u8003\u307e\u3067\u306b
\n\u3053\u308c\u306fFalse\/Positive\u3067\u3042\u308a\u3001\u73fe\u5728\u306f\u4fee\u6b63\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u8a73\u7d30\u306f\u4ee5\u4e0b\u3092\u3054\u89a7\u304f\u3060\u3055\u3044\u3002<\/p>\n

3\u670816\u65e5\u306e\u671d\u304b\u3089\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u5185\u306e\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u306e\u52d5\u4f5c\u691c\u77e5\u306b\u8d77\u56e0\u3059\u308b\u4e00\u9023\u306e\u507d\u967d\u6027\u691c\u77e5\u3092\u7d4c\u9a13\u3057\u305f\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002Microsoft\u306f\u3053\u306e\u691c\u51fa\u306e\u6025\u5897\u3092\u8abf\u67fb\u3057\u3001\u8aa4\u691c\u51fa\u3067\u3042\u308b\u3068\u5224\u65ad\u3057\u307e\u3057\u305f\u3002Microsoft\u306f\u8aa4\u691c\u51fa\u3092\u6291\u5236\u3059\u308b\u305f\u3081\u306b\u30af\u30e9\u30a6\u30c9\u30ed\u30b8\u30c3\u30af\u3092\u66f4\u65b0\u3057\u307e\u3057\u305f\u3002<\/p>\n

\u8aac\u660e
\n- \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u5185\u306e\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u306e\u52d5\u4f5c\u691c\u77e5\u306b\u8d77\u56e0\u3059\u308b\u3001\u4e00\u9023\u306e\u8aa4\u691c\u77e5\u3092\u7d4c\u9a13\u3055\u308c\u305f\u304a\u5ba2\u69d8\u304c\u3044\u3089\u3063\u3057\u3083\u308b\u304b\u3082\u3057\u308c\u307e\u305b\u3093\u3002
\n- Microsoft\u306f\u3001\u4eca\u5f8c\u30a2\u30e9\u30fc\u30c8\u304c\u751f\u6210\u3055\u308c\u306a\u3044\u3088\u3046\u306b\u3059\u308b\u305f\u3081\u3001\u30af\u30e9\u30a6\u30c9 \u30ed\u30b8\u30c3\u30af\u3092\u66f4\u65b0\u3057\u3001\u4ee5\u524d\u306e\u8aa4\u691c\u51fa\u3092\u89e3\u9664\u3057\u307e\u3057\u305f\u3002<\/p>\n<\/blockquote>\n

\u540c\u3058\u30b9\u30ec\u30c3\u30c9\u306e\u5225\u306e\u56de\u7b54\u3067Scholz\u6c0f\u306f\u3001\u3053\u306e\u9a12\u52d5\u306f\u30b3\u30fc\u30c9\u306e\u554f\u984c\u306b\u3088\u3063\u3066\u5f15\u304d\u8d77\u3053\u3055\u308c\u3001\u305d\u306e\u5f8c\u4fee\u6b63\u3055\u308c\u305f\u3068\u8aac\u660e<\/a>\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n

Root cause: A recently deployed update within service components that detect ransomware alerts introduced a code issue that was causing alerts to be triggered when no issue was present.<\/p>\n

\u6839\u672c\u7684\u306a\u539f\u56e0 \u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u306e\u30a2\u30e9\u30fc\u30c8\u3092\u691c\u77e5\u3059\u308b\u30b5\u30fc\u30d3\u30b9\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u306b\u304a\u3044\u3066\u3001\u6700\u8fd1\u5b9f\u65bd\u3055\u308c\u305f\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306b\u3088\u308a\u3001\u554f\u984c\u304c\u5b58\u5728\u3057\u306a\u3044\u306b\u3082\u304b\u304b\u308f\u3089\u305a\u30a2\u30e9\u30fc\u30c8\u304c\u767a\u52d5\u3055\u308c\u308b\u30b3\u30fc\u30c9\u4e0a\u306e\u554f\u984c\u304c\u767a\u751f\u3057\u307e\u3057\u305f\u3002\n<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"

Microsoft Defender for Endpoint\u304c\u3001Office\u30a2\u30d7\u30ea\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u3068\u3057\u3066\u691c\u51fa\u3059\u308b\u5927\u5931\u614b\u304c\u767a\u751f\u3057\u3066\u3044\u305f\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3057\u305f(Neowin)\u3002 \u554f\u984c\u306f\u7c73\u56fd\u6642\u959316\u65e5\u306e\u672a\u660e\u306b\u3001\u30b7\u30b9 […]<\/p>\n","protected":false},"author":2,"featured_media":95918,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"swell_btn_cv_data":"","footnotes":""},"categories":[3],"tags":[87,220],"class_list":["post-95917","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-windows","tag-microsoft","tag-office"],"_links":{"self":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts\/95917","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/comments?post=95917"}],"version-history":[{"count":0,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts\/95917\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/media\/95918"}],"wp:attachment":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/media?parent=95917"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/categories?post=95917"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/tags?post=95917"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}