Attack Surface Reduction
Harden Microsoft Office: macros, OLE and add-ins
Lock down Microsoft 365 Apps: block internet macros, disable XLM, scan VBA with AMSI, keep Protected View on, require signed add-ins, stop OLE and DDE.
Foundation
Guides tagged
#office
Attack Surface Reduction
Attack surface reduction rules: GUIDs and safe rollout
A practical reference to Microsoft Defender ASR rules: what each rule blocks, its GUID, which to enforce first, audit-mode rollout, event IDs and exclusions that don't gut protection.
Foundation