Blog Post

Microsoft Defender for Endpoint Blog
4 MIN READ

Recovering from Attack Surface Reduction rule shortcut deletions

Scott Woodgate's avatar
Scott Woodgate
Icon for Microsoft rankMicrosoft
Jan 14, 2023
Updated 1/23/2023 @ 1:10pm PST   On January 13th, Windows Security and Microsoft Defender for Endpoint customers may have experienced a series of false positive detections for the Attack Surface ...
Updated Jan 23, 2023
Version 28.0
Scott Woodgate's avatar
Icon for Microsoft rankMicrosoft
Joined September 07, 2016
View Profile
Microsoft Defender for Endpoint Blog

Microsoft Defender for Endpoint disrupts ransomware with industry-leading endpoint security, providing comprehensive protection across all platforms and devices.

When evaluating various solutions, your peers value hearing from people like you who’ve used the product. Review Defender for Endpoint by filling out a Gartner Peer Insights survey and receive a $25 USD gift card (for customers only). Here are the Privacy/Guideline links: Microsoft Privacy Statement, Gartner’s Community Guidelines & Gartner Peer Insights Review Guide.

NeilConstant's avatar
NeilConstant
Copper Contributor
Jan 14, 2023

When i try to open both links above for advanced hunting when i click the link, it just shows the security score.  Do you then click Custom detection rules within advanced as this page is not loading for me. Do you need a particular license to access this we have A1 and A3.

 

Also a user guide on how to deploy this through intune would be useful.

 

The first version of the script is available here: MDE-PowerBI-Templates/AddShortcutsV1.ps1 at master · microsoft/MDE-PowerBI-Templates · GitHub

 

I have added into endpoint under devices and scripts, but does not appear to be sending out.