Hello again and welcome to the second part in our blog series on demystifying attack surface reduction (ASR) rules. This blog post is focused on how to configure Microsoft Defender ATP ASR rules and ...
Updated May 05, 2020
Version 8.0
Blog Post
#1 Please use this as a reference for using Graph API to configure ASR settings
#2 You can export the object (template that you create) and import it into another tenant (using the Graph API or an off the shelve utility to do so)
#3 ASR rules ID's are valid only for Defender AV. Intune has ID's for it's own objects. As long as the CSP gets the correct setting, it honestly doesn't matter which ID's Intune uses for it's URIs.
#4 The PowerShell FP is a know issue and it's being fixed.
As for you strategy on exclusions. All looks good. Just one extra tidbit. Don't try to apply 1 golden policy to 100% of an organization. Exceptions and edge cases will appear, and it's much simpler to have those in a separate policy item, then just trying to adapt 1 single policy for every possible scenario (exclusion, app compact, etc.).
Hth,
António.