--- title: Use Attack Surface Reduction rules to prevent malware infection description: ASR rules can help prevent exploits from using apps and scripts to infect machines with malware keywords: Attack Surface Reduction, hips, host intrusion prevention system, protection rules, anti-exploit, antiexploit, exploit, infection prevention search.product: eADQiWindows 10XVcnh ms.pagetype: security ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library ms.pagetype: security localizationpriority: medium author: iaanw ms.author: iawilt --- # Reduce attack surfaces with Windows Defender Exploit Guard **Applies to:** - Windows 10 Insider Preview **Audience** - Enterprise security administrators **Manageability available with** - Group Policy - PowerShell - Configuration service providers for mobile device management ## ASR ```xml Microsoft-Windows-Windows Defender/Operational,Microsoft-Windows-Windows Defender/WHC 1121,1122,5007 0 False Attack Surface Reduction view ``` ## CFA ```xml Microsoft-Windows-Windows Defender/Operational,Microsoft-Windows-Windows Defender/WHC1123,1124,50070FalseControlled Folder Access view ``` ## EP ```xml Microsoft-Windows-Security-Mitigations/KernelMode,Microsoft-Windows-Win32k/Concurrency,Microsoft-Windows-Win32k/Contention,Microsoft-Windows-Win32k/Messages,Microsoft-Windows-Win32k/Operational,Microsoft-Windows-Win32k/Power,Microsoft-Windows-Win32k/Render,Microsoft-Windows-Win32k/Tracing,Microsoft-Windows-Win32k/UIPI,System,Microsoft-Windows-Security-Mitigations/UserMode 1-24, 5, 260 Microsoft-Windows-Security-Mitigations,Microsoft-Windows-WER-Diag,Microsoft-Windows-Win32k,Win32k 0 True Exploit protection view 255 70 305 215 215 215 50 110 80 170 70 70 90 70 80 70 100 85 140 140 ``` ## NP ```xml Microsoft-Windows-Windows Defender/Operational,Microsoft-Windows-Windows Defender/WHC 1125,1126,5007 0 False Network Protection view ```