Random feedback on this excellent but starting to age article.
Under the section "#2 How do ASR rules exclusions work?", the following statement is made:
"Right now, all but 2 specific rules do not support exclusions."
However, the table illustrates instead just two rules that don't support exclusions. The sentence *appears* to have a grammatical error.
Unless I'm misunderstanding, the sentence should read "Right now, all but 2 specific rules support exclusions."
Several points in the article reference a link for ASR tables, however there is not table at the link.
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction?view=o365-worldwide#attack-surface-reduction-rules
While the link is valid, it does not appear to contain these items that the article attempts to refer to at several points:
A complete list of rule name to GUID mapping
Table for latest updates and more detailed information on the ASR rules that support exclusions
It looks like the correct link perhaps is https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction-rules-reference
Links in comments to Intune are useless as Intune portal has been replaced with Endpoint portal.