Skip to content
WindowsHardening

Guides tagged

#macros

← Back to all guides
Attack Surface Reduction

Harden Microsoft Office: macros, OLE and add-ins

Lock down Microsoft 365 Apps: block internet macros, disable XLM, scan VBA with AMSI, keep Protected View on, require signed add-ins, stop OLE and DDE.

Foundation
Attack Surface Reduction

Attack surface reduction rules: GUIDs and safe rollout

A practical reference to Microsoft Defender ASR rules: what each rule blocks, its GUID, which to enforce first, audit-mode rollout, event IDs and exclusions that don't gut protection.

Foundation