Attack Surface Reduction in Windows 10

Показать описание

Рекомендации по теме

Комментарии

How is asr not just another name for anti-malware protection? Is it the fact that you are setting policy to prevent application actions that normally would be where malware behaviors attempt to carry out their deeds?

myusrn

Love your demos Matt, but I wish you'd clarify how ASR is used on Servers.
I think the only way is to use those powershell commands?
i.e. you can't configure servers via Endpoint Manager right?
And the report is cool but it would be useful to know exactly where the alerts are generated - in securitycenter I assume, and then they're also available in security.microsoft.com since that's your single pane of glass.
And on a side topic I'd like someone to do a video on which defender pieces should be installed on servers eg:
- defender for server (vs for endpoints) - eg. 'you're not really installing defender on servers, it's already there, you're installing the azure monitor (OMS) agent so defender can communicate with securitycenter, which in turn allows Sentinel and MCAS to pull events from the log analytics workspace, and provides MCAS and securitycenter a way to update defender with exclusions etc.
- defender for identity (for domain controllers)
- azure monitor - for security events > sentinel
- enable ASR rules via powershell

simple-security

I have an issue setting ASR Policies in EndPoint Manager using PowerShell and Intune. Basically, the script setting work but they fail to show up in GUI. Who can I contact to help resolve??

directorcia

Does it work along other vendor EDR no conflict, can it be enable since other vendor control security setting if installed on windows 10 pro

majidomeir

What software do you use to record your videos?

ToTCaMbIu

Attack Surface Reduction in Windows 10

Attack surface reduction in Microsoft Defender for Endpoint

Attack Surface Reduction in Windows 10

Block Malware in Office Macros using Attack Surface Reduction in Windows 10

How to use Attack Surface Reduction Rules in Windows 10

MDE Tutorial -15- Attack Surface Reduction Rules-in Microsoft Defender for Endpoints

UNDERSTAND ATTACK SURFACE REDUCTION IN MICROSOFT DEFENDER FOR ENDPOINT

Configure Attack Surface Reduction Rules | Group Policy

Block Cred Dumps using Attack Surface Reduction Rules in Windows

#AzureBacktoSchool 2024 - Uros Babic - Unified Security Operations with Sentinel and Defender XDR

Deploy Attack Surface Reduction Rules from Microsoft Intune

Attack Surface Reduction implementation report

Configure Attack Surface Reduction rules | PowerShell

What is attack surface reduction rule? | Microsoft Defender for Endpoint

Attack Surface Reduction Rules | Deployment Methods and Modes

Microsoft Defender ATP-Attack Surface Reduction

Microsoft Defender for Endpoint : Network Protection in MDE | Attack Surface Reduction | ASR Rules

Attack Surface Reduction Rules (ASRR) in Microsoft Intune aktivieren

2 Attack Surface Reduction ASR Microsoft Defender for Business

Implementing attack surface reduction via group policy

Attack Surface Reduction Rules | Rule 15 | Block Win32 API calls from Office macros

How to start working with Attack Surface Reduction rules like a boss

Attack Surface Reduction | Virtual Ninja Training with Heike Ritter

Microsoft Defender Application guard | Attack Surface Reduction

Stop malware with Attack Surface Reduction | Microsoft 365 Defender