Attack Surface Reduction
Harden Microsoft Edge with Group Policy and Intune
Harden Microsoft Edge by policy: enforced SmartScreen, an extension allowlist, enhanced security mode, download restrictions and fast forced updates.
Foundation
Guides tagged
#attack-surface-reduction
Attack Surface Reduction
Exploit protection: system and per-app mitigations
Configure Windows exploit protection, the EMET successor: system defaults, per-app mitigations, audit mode, XML export/import and GPO or Intune deployment.
Intermediate
Attack Surface Reduction
Harden Microsoft Office: macros, OLE and add-ins
Lock down Microsoft 365 Apps: block internet macros, disable XLM, scan VBA with AMSI, keep Protected View on, require signed add-ins, stop OLE and DDE.
Foundation