Systemic activity

This week defending Windows Defender Advanced Threat Protection (WDATP) is designed to detect attacks of this kind not by searching for a certain kind of harmful code, but by identifying suspicious systemic activity.