mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-07-03 11:13:50 +00:00
asr changes
This commit is contained in:
@ -108,8 +108,6 @@ See the [Evaluate Attack Surface Reduction rules](evaluate-attack-surface-reduct
|
||||
>[!NOTE]
|
||||
>Not sure if this is right. What does AttackSurfaceReductionRules_Actions do? Do you need to add $TRUE/$FALSE or 1/0 at the end to enable it? Does the rule need to go in " or {}? Some examples would be handy here I think
|
||||
|
||||
>[!IMPORTANT]
|
||||
>Use `Add-MpPreference` to append or add rules. Using the `Set-MpPreference` cmdlet will overwrite the existing list.
|
||||
|
||||
You can enable the feauting in auditing mode using the following cmdlet:
|
||||
|
||||
@ -117,7 +115,7 @@ You can enable the feauting in auditing mode using the following cmdlet:
|
||||
Set-MpPreference -AttackSurfaceReductionRules_Actions AuditMode
|
||||
```
|
||||
|
||||
Use `Disabled` insead of AuditMode to turn the feature off.
|
||||
Use `Disabled` insead of `AuditMode` or `Enabled` to turn the feature off.
|
||||
|
||||
>[!NOTE]
|
||||
>We need to walk through this so I understand how it works
|
||||
|
Reference in New Issue
Block a user