Monitoring Exploit Guard ASR Events

Defender Exploit Guard (Exploit Guard) Attack Surface Reduction (ASR) rules can block malicious software from installing or running on a device. The accompanying screen shot shows Windows events triggered by adding a new ASR rule. It shows that a new rule has been set to audit mode (0x2).

Become a DOM member or log in to read the full report