Attack Surface Reduction
Attack surface reduction rules: GUIDs and safe rollout
A practical reference to Microsoft Defender ASR rules: what each rule blocks, its GUID, which to enforce first, audit-mode rollout, event IDs and exclusions that don't gut protection.
Foundation