Forum Discussion

Copper Contributor

Apr 29, 2019

Solved

Explot Guard - Attack Surface Reduction Rules not reporting as Enabled in WDATP console

We have rolled out Attack Surface Reduction rules via GPO (including newst rule in v1809 so 14/14 rules). We have some in audit mode and some applying. I can verify systems have the policy via Get-...

yaakov_iyun
Jul 15, 2019
Doug Howell

Hi,

You are correct in your assumption.

We are currently in the process of changing this behavior and we will indicate the status for every Attack Surface Reduction rule separately.

Doug Howell

Copper Contributor

Jul 12, 2019

Jacques van Zijl Do you have any comment on the Attack Surface Reduction Rules? As all our machines move to v1903 the behavior remains the same.

Exploit Guard missing pointsASR rules in GPOWe know the GPO is applied to the machines, with a mix of enforced and audit for the various rules. Why do we get NO points and 100% machines report there is an issue when we have actually hardened the machines significantly via the use of many of the rules (just not all of them)?

yaakov_iyun

Microsoft

Jul 15, 2019

Doug Howell

Hi,

You are correct in your assumption.

We are currently in the process of changing this behavior and we will indicate the status for every Attack Surface Reduction rule separately.

Doug Howell
Copper Contributor
Dec 31, 2019
yaakov_iyun

What is the timeline on this change? Lots has changed in the console but still it is all or none for evaluating and scoring ASR rules.