Update behavioral-blocking-containment.md

This commit is contained in:
Denise Vangel-MSFT
2020-05-20 14:29:19 -07:00
parent 4eaf2d300c
commit 44e99f743b

View File

@ -46,8 +46,6 @@ The following image shows an example of an alert that was triggered by behaviora
:::image type="content" source="images/blocked-behav-alert.png" alt-text="Example of an alert through behavioral blocking and containment":::
The alert includes recommended actions to help your security operations team further investigate and mitigate the threat.
## Behavioral blocking and containment capabilities
- **On-client, policy-driven [attack surface reduction rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction)** Predefined common attack behaviors are prevented from executing, according to your attack surface reduction rules. When such behaviors attempt to execute, they can be seen in the Microsoft Defender Security Center [https://securitycenter.windows.com](https://securitycenter.windows.com) as informational alerts. (Attack surface reduction rules are not enabled by default; you configure your policies in the Microsoft Defender Security Center.)