mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-20 12:53:38 +00:00
Update windows/security/threat-protection/microsoft-defender-atp/evaluate-attack-surface-reduction.md
Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com>
This commit is contained in:
@ -40,7 +40,7 @@ Learn how to evaluate attack surface reduction rules by enabling audit mode to t
|
||||
|
||||
Enable attack surface reduction rules in audit mode to view a record of apps that would have been blocked if the feature was fully enabled. Test how the feature will work in your organization to ensure it doesn't affect your line-of-business apps. You can also get an idea of how often the rules will fire during normal use.
|
||||
|
||||
To enable attack surface reduction rule in audit mode, use the following PowerShell cmdlet:
|
||||
To enable an attack surface reduction rule in audit mode, use the following PowerShell cmdlet:
|
||||
|
||||
```PowerShell
|
||||
Add-MpPreference -AttackSurfaceReductionRules_Ids <rule ID> -AttackSurfaceReductionRules_Actions AuditMode
|
||||
|
Reference in New Issue
Block a user