Forum Discussion
Fabio_Danzetta
Feb 02, 2025Copper Contributor
How to Use Baselines Correctly as a Beginner
Hello everyone, regarding baselines I am a beginner, I downloaded them yesterday for Windows 11 pro and tried to document myself to use them in the right way but I found fragmentary information arou...
AaronMargosis_Tanium
Feb 04, 2025Iron Contributor
The SCT baselines don't provide a means to undo the application of a baseline. Some of the settings are "tattooed" so it's not entirely possible to revert completely to the original state. The purpose of the "Remove-EPBaselineSettings.ps1" script was to TRY to restore default settings for Exploit Protection settings that had been included in a baseline from several years ago. If experimenting, consider using virtual machines with snapshots that can be reverted.
For the Policy Analyzer questions, see the documentation ("Policy Analyzer.pdf") that's included with the tool. Note that it does not ingest Excel files.