Ravi Sarode

Microsoft Defender for Endpoint

• Part of the Security Research team for Microsoft Defender for Endpoint
• Analyzing false positives of the product and mitigating them
• Analyzing machine events data to identify False Positive / True Positive
• Emulating APT groups behavior/attacks to identify detections in EDR product and MITRE ATT&CK framework
• Writing suppression rules for False Positive detectors
• Handling customer detection issues by providing prompt and accurate feedback and creating reports based on analysis

• Worked in ENH iSecure as an IAM Trainee