ASR detection shows Rules Turned OFF on machines

Copper Contributor

Hi Team,


We have recently migrated from TrendMicro to MSDATP ( Cloud) along with Defender as AV . We have deployed Exploit Guard policy on all WKs  through SCCM CB however when i checked Attack Surface detection rule -  shows Rule is turned off on  few machines . Any idea how to fix it and  Also please let me know which of ASR rules should be enabled in Audit mode for pilot phase .




0 Replies