From 22a2aaed3a53254cad33114b48768ac2a43003f3 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Fri, 8 Jan 2021 01:59:20 +0100 Subject: [PATCH] Ticket #8926 (Table of PowerShell cmdlets isn't) > "This table lists the PowerShell cmdlets" doesn't list the cmdlets (there are only three). > The column marked PowerShell cmdlets seems to refer to property names. Current table description text: "This table lists the PowerShell cmdlets (and associated audit mode cmdlet) that can be used to configure each mitigation." **Suggested description:** This table lists the individual **Mitigations** (and **Audits**, when available) to be used with the `-Enable` or `-Disable` cmdlet parameters. Closes #8926 --- .../microsoft-defender-atp/enable-exploit-protection.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md index cb9f2e13d1..8fe52a9432 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md @@ -207,10 +207,10 @@ If you need to restore the mitigation back to the system default, you need to in Set-Processmitigation -Name test.exe -Remove -Disable DEP ``` -This table lists the PowerShell cmdlets (and associated audit mode cmdlet) that can be used to configure each mitigation. +This table lists the individual **Mitigations** (and **Audits**, when available) to be used with the `-Enable` or `-Disable` cmdlet parameters. -| Mitigation | Applies to | PowerShell cmdlets | Audit mode cmdlet | -| :--------- | :--------- | :----------------- | :---------------- | +| Mitigation type | Applies to | Mitigation cmdlet parameter keyword | Audit mode cmdlet parameter | +| :-------------- | :--------- | :---------------------------------- | :-------------------------- | | Control flow guard (CFG) | System and app-level | CFG, StrictCFG, SuppressExports | Audit not available | | Data Execution Prevention (DEP) | System and app-level | DEP, EmulateAtlThunks | Audit not available | | Force randomization for images (Mandatory ASLR) | System and app-level | ForceRelocateImages | Audit not available |