From 6bcbff0e4e6b227ff2cb1d3015588a77f092eae8 Mon Sep 17 00:00:00 2001
From: Andrea Bichsel <35236577+andreabichsel@users.noreply.github.com>
Date: Mon, 15 Oct 2018 12:14:29 -0700
Subject: [PATCH] Corrected E3 rules list

---
 ...urface-reduction-rules-in-windows-10-enterprise-e3.md | 9 ---------
 1 file changed, 9 deletions(-)

diff --git a/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-rules-in-windows-10-enterprise-e3.md b/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-rules-in-windows-10-enterprise-e3.md
index d1984f870d..656a55447f 100644
--- a/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-rules-in-windows-10-enterprise-e3.md
+++ b/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-rules-in-windows-10-enterprise-e3.md
@@ -108,15 +108,6 @@ Malware can use macro code in Office files to import and load Win32 DLLs, which
 
 This rule attempts to block Office files that contain macro code that is capable of importing Win32 DLLs. 
 
-### Rule: Block executable files from running unless they meet a prevalence, age, or trusted list criteria
- 
-This rule blocks the following file types from being run or launched unless they meet prevalence or age criteria set by admins, or they are in a trusted list or exclusion list:
- 
-- Executable files (such as .exe, .dll, or .scr) 
-
->[!NOTE]
->You must [enable cloud-delivered protection](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus) to use this rule.
- 
 ### Rule: Use advanced protection against ransomware
  
 This rule provides an extra layer of protection against ransomware. Executable files that enter the system will be scanned to determine whether they are trustworthy. If the files exhibit characteristics that closely resemble ransomware, they are blocked from being run or launched, provided they are not already in the trusted list or exception list.