Guides tagged

#ransomware

Microsoft Defender

Controlled folder access: ransomware protection that works

Roll out Defender controlled folder access against ransomware: audit mode, events 1123 and 1124, allowing apps, adding protected folders and enforcing by ring.

IntermediateSep 29, 2026

Attack Surface Reduction

Attack surface reduction rules: GUIDs and safe rollout

A practical reference to Microsoft Defender ASR rules: what each rule blocks, its GUID, which to enforce first, audit-mode rollout, event IDs and exclusions that don't gut protection.

FoundationSep 17, 2026