128 Seconds to disruption: Microsoft Defender stops ransomware at QNET

Microsoft previews automatic device isolation in Defender for Endpoint

Disrupting Attacks on Endpoints | Attack Disruption Engine