Рет қаралды 2,638
Attack Surface Reduction | Rule 1 | Block abuse of exploited vulnerable signed drivers
Microsoft Article -
learn.microsof...
MITRE Article - attack.mitre.o...
Attack Surface Reduction Rules | Rule 1 | Block abuse of exploited vulnerable signed drivers
• Attack Surface Reducti...
Attack Surface Reduction Rules | Rule 2 | Block Adobe Reader from creating child processes - • Attack Surface Reducti...
Attack Surface Reduction Rules| Rule 3 | Block all Office applications from creating child processes - • Attack Surface Reducti...
Attack Surface Reduction|Rule -4|Block credential stealing from the Windows local security authority - • Attack Surface Reducti...
Attack Surface Reduction Rules | Rule 5 | Block executable content from email client and webmail - • Attack Surface Reducti...
Attack Surface Reduction|Rule-6|Block executable file from running unless they meet a prevalence,age - • Attack Surface Reducti...
Attack Surface Reduction Rules | Rule 7 | Block execution of potentially obfuscated scripts - • Attack Surface Reducti...
Attack Surface Reduction|Rules 8|Block JavaScript or VBScript from launching downloaded executable - • Attack Surface Reducti...
Attack Surface Reduction Rules | Rule 9 | Block Office applications from creating executable content - • Attack Surface Reducti...
Attack Surface Reduction | Rule 10 | Block Office application from injecting code into other process - • Attack Surface Reducti...
Attack Surface Reduction|Rule 11|Block Office communication application from creating child process - • Attack Surface Reducti...
Attack Surface Reduction Rules | Rule 12 | Block persistence through WMI event subscription - • Attack Surface Reducti...
Attack Surface Reduction Rule -13 | Block process creations originating from PSExec and WMI command - • Attack Surface Reducti...
Attack Surface Reduction Rules | Rule 14 | Block untrusted and unsigned processes that run from USB - • Attack Surface Reducti...
Attack Surface Reduction Rules | Rule 15 | Block Win32 API calls from Office macros - • Attack Surface Reducti...
Attack Surface Reduction Rules | Rule 16 | Use advanced protection against ransomware - • Attack Surface Reducti...