Forum Discussion
Solved
ASR: Block abuse of exploited vulnerable signed drivers
Hey there, I am seeing a recommendation to apply the ASR Rule as listed above. It looks like a fairly new edition to the series of 16 ASR rules that can be configured. However, on closer insp...
James_Gillies we have not added this ASR Rule to the MEM ASR rule configuration profile. We have plans to add this configuration option so you don't have to use OMA-URIs so stay tuned.
Thanks,
Jake
mcoombe I've found something very interesting:
Have anyone tried creating a new Policy inside of Endpoint Security?
After creating a new rule there is whole new layout of the items, including a new item: Block abuse of exploited vulnerable signed drivers (Device)"
edit: in the "Target" column the new policy has the entry "mdm,microsoftSense" instead of "mdm".
This could go along with server management i guess?
🙂
