diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index e95d391260..7da72b8611 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -181,7 +181,7 @@ #### [Configure attack surface reduction](windows-defender-atp/configure-attack-surface-reduction.md) ##### [Hardware-based isolation](windows-defender-application-guard/install-wd-app-guard.md) ###### [Group Policy settings](windows-defender-application-guard/configure-wd-app-guard.md) -##### [Application control](windows-defender-application-control/windows-defender-application-control-deployment-guide.md) +##### [Application control](windows-defender-application-control/windows-defender-application-control.md) ##### [Exploit protection](windows-defender-exploit-guard/enable-exploit-protection.md) ###### [Customize exploit protection](windows-defender-exploit-guard/customize-exploit-protection.md) ###### [Import/export configurations](windows-defender-exploit-guard/import-export-exploit-protection-emet-xml.md) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-attack-surface-reduction.md b/windows/security/threat-protection/windows-defender-atp/configure-attack-surface-reduction.md index 37062fcdb7..254660783a 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-attack-surface-reduction.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-attack-surface-reduction.md @@ -13,4 +13,21 @@ ms.localizationpriority: high ms.date: 07/01/2018 --- -# To do: Amitai and Andrea and Justin +# Configure attack surface reduction + +You can configure attack surface reduction with a number of tools, including: + +- Microsoft Intune +- System Center Configuration Manager +- Group Policy +- PowerShell cmdlets + + +The topics in this section describe how to configure attack surface reduction. Each topic includes instructions for the applicable configuration tool (or tools). + +## In this section +Topic | Description +:---|:--- +[Enable hardware-based isolation for Microsoft Edge](../windows-defender-application-guard/install-wd-app-guard.md) | How to preprare for and install Application Guard, including hardware and softeware requirements +[Enable application control](./windows-defender-application-control/windows-defender-application-control.md)|How to control applications run by users and potect kernel mode processes. +[Configure end-user antivirus interaction](configure-end-user-interaction-windows-defender-antivirus.md)|Configure how end-users interact with antivirus, what notifications they see, and whether they can override settings