Demystifying attack surface reduction rules - Part 1

Hi Antonio Vasconcelos & Rob Mallicoat,

Running the Powershell script gives this output - and it appears to not be reporting ASR Exclusions for exe's and services:

Running script gives this

Note the lack of ASR Exclusions - and yet I get this result running these commands that is more accurate on what I am expecting:

PS C:\Users\w56179\Downloads> $Preferences = Get-MpPreference; $Preferences.ExclusionPath

%ProgramData%\Microsoft\Windows Defender

%ProgramFiles%\Manufacturer\Endpoint Agent\*.ead

%ProgramFiles%\Manufacturer\Endpoint Agent\temp

%ProgramFiles%\Windows Defender

%SystemRoot%\CCM\*.sdf

%SystemRoot%\CCM\Logs

%SystemRoot%\CCMCache

%SystemRoot%\CCMSetup

%SystemRoot%\Logs

PS C:\Users\w56179\Downloads> $Preferences = Get-MpPreference; $Preferences.ExclusionProcess

%ProgramFiles% (x86)\Zscaler\ZSAService\ZSAService.exe

%ProgramFiles% (x86)\Zscaler\ZSATray\ZSATray.exe

%ProgramFiles% (x86)\Zscaler\ZSATunnel\ZSATunnel.exe

%ProgramFiles%\Manufacturer\Endpoint Agent\brkrprcs64.exe

%ProgramFiles%\Manufacturer\Endpoint Agent\cui.exe

%ProgramFiles%\Manufacturer\Endpoint Agent\edpa.exe

%ProgramFiles%\Manufacturer\Endpoint Agent\prcs32.exe

%ProgramFiles%\Manufacturer\Endpoint Agent\wdp.exe

%SystemRoot%\CCM\CcmExec.exe

%SystemRoot%\CCM\CcmRepair.exe

%SystemRoot%\CCM\RemCtrl\CmRcService.exe

%SystemRoot%\CCMSetup\CcmSetup.exe