Forum Discussion

Copper Contributor

Apr 28, 2023

ASR Logging for the Block settings

I'm trying to troubleshoot some office plugin which aren't functioning and I'm trying to determine whether it's the various Office block settings, which I've enumerated below. When Attack Surface Red...

dperusich

Copper Contributor

Apr 28, 2023

I'm aware events are logged locally at Applications and Services Logs > Microsoft > Windows > Windows Defender > Operational and I'm leveraging the Troubleshooting ASR rules documentation, but they are not helping me dig into the issue which is why I'm asking.

Thanks!

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/troubleshoot-asr-rules?view=o365-worldwide

rockyte
Copper Contributor
May 07, 2023
dperusich

Have you checked in the dashboard Reports -> Attack Surface Reduction Rules? This is typically where you audit within the console for audits/blocks and adding exclusions.

Forum Discussion

ASR Logging for the Block settings

Share

Resources