deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-07-04 03:33:36 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

asr changes

Browse Source
This commit is contained in:
Iaan D'Souza-Wiltshire
2017-08-15 18:59:56 -07:00
parent f594ecf3f5
commit 396ae19f2e
2 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
windows/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md
View File

@ -108,8 +108,6 @@ See the [Evaluate Attack Surface Reduction rules](evaluate-attack-surface-reduct
>[!NOTE] >[!NOTE]
>Not sure if this is right. What does AttackSurfaceReductionRules_Actions do? Do you need to add $TRUE/$FALSE or 1/0 at the end to enable it? Does the rule need to go in " or {}? Some examples would be handy here I think >Not sure if this is right. What does AttackSurfaceReductionRules_Actions do? Do you need to add $TRUE/$FALSE or 1/0 at the end to enable it? Does the rule need to go in " or {}? Some examples would be handy here I think
>[!IMPORTANT]
>Use `Add-MpPreference` to append or add rules. Using the `Set-MpPreference` cmdlet will overwrite the existing list.
You can enable the feauting in auditing mode using the following cmdlet: You can enable the feauting in auditing mode using the following cmdlet:
@ -117,7 +115,7 @@ You can enable the feauting in auditing mode using the following cmdlet:
Set-MpPreference -AttackSurfaceReductionRules_Actions AuditMode Set-MpPreference -AttackSurfaceReductionRules_Actions AuditMode
``` ```
Use `Disabled` insead of AuditMode to turn the feature off. Use `Disabled` insead of `AuditMode` or `Enabled` to turn the feature off.
>[!NOTE] >[!NOTE]
>We need to walk through this so I understand how it works >We need to walk through this so I understand how it works