mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-20 21:03:42 +00:00
asr drafted
This commit is contained in:
@ -28,13 +28,12 @@ ms.author: iawilt
|
|||||||
|
|
||||||
**Manageability available with**
|
**Manageability available with**
|
||||||
|
|
||||||
- Windows Defender Security Center app
|
|
||||||
- Group Policy
|
- Group Policy
|
||||||
- PowerShell
|
- PowerShell
|
||||||
- Configuration service providers for mobile device management
|
- Configuration service providers for mobile device management
|
||||||
|
|
||||||
|
|
||||||
Attack Surface Reduction is a feature that is part of Windows Defender Exploit Guard. It helps prevent actions and apps that are typically used by exploit-seeking malware to infect machines.
|
Attack Surface Reduction is a feature that is part of [Windows Defender Exploit Guard](windows-defender-exploit-guard.md). It helps prevent actions and apps that are typically used by exploit-seeking malware to infect machines.
|
||||||
|
|
||||||
The feature is comprised of a number of rules, each of which target specific behaviors that are typically used by malware and malicious apps to infect machines, such as:
|
The feature is comprised of a number of rules, each of which target specific behaviors that are typically used by malware and malicious apps to infect machines, such as:
|
||||||
|
|
||||||
|
@ -35,7 +35,7 @@ ms.author: iawilt
|
|||||||
- Configuration service providers for mobile device management
|
- Configuration service providers for mobile device management
|
||||||
|
|
||||||
|
|
||||||
Controlled Folder Access helps you protect valuable data from malicious apps and threats, such as ransomware. It is part of Windows Defender Exploit Guard, which is itself a component in the new Windows Defender Advanced Threat Protection offering of security and threat prevention products.
|
Controlled Folder Access helps you protect valuable data from malicious apps and threats, such as ransomware. It is part of [Windows Defender Exploit Guard](windows-defender-exploit-guard.md).
|
||||||
|
|
||||||
All apps (any executable file, including .exe, .scr, .dll files and others) are assessed by Windows Defender Antivirus, which then determines if the app is malicious or safe. If the app is determined to be malicious or suspicious, then it will not be allowed to make changes to any files in any protected folder.
|
All apps (any executable file, including .exe, .scr, .dll files and others) are assessed by Windows Defender Antivirus, which then determines if the app is malicious or safe. If the app is determined to be malicious or suspicious, then it will not be allowed to make changes to any files in any protected folder.
|
||||||
|
|
||||||
|
@ -79,8 +79,7 @@ Use the [./Vendor/MSFT/Policy/Config/Defender/AttackSurfaceReductionOnlyExclusio
|
|||||||
## Customize the notification
|
## Customize the notification
|
||||||
|
|
||||||
|
|
||||||
See the [Windows Defender Security Center](/windows-defender-security-center/windows-defender-security-center) topic for more information about customizing the notification when a rule is triggered and blocks an app or file.
|
See the [Windows Defender Security Center](/windows-defender-security-center/windows-defender-security-center#customize-notifications-from-the-windows-defender-security-center) topic for more information about customizing the notification when a rule is triggered and blocks an app or file.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
@ -90,11 +89,3 @@ See the [Windows Defender Security Center](/windows-defender-security-center/win
|
|||||||
- [Enable Attack Surface Reduction](enable-attack-surface-reduction.md)
|
- [Enable Attack Surface Reduction](enable-attack-surface-reduction.md)
|
||||||
- [Evaluate Windows Defender Exploit Guard](evaluate-windows-defender-exploit-guard.md)
|
- [Evaluate Windows Defender Exploit Guard](evaluate-windows-defender-exploit-guard.md)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
### Attack Surface Reduction
|
|
||||||
|
|
||||||
- ./Vendor/MSFT/Policy/Config/Defender/AttackSurfaceReductionOnlyExclusions
|
|
||||||
- ./Vendor/MSFT/Policy/Config/Defender/AttackSurfaceReductionRules
|
|
||||||
-- Value as String Data Type : {75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84}:1
|
|
Reference in New Issue
Block a user