Control Attack Surface Reduction (ASR) Rules
under review
J
Justin Smith
One of the key components of Windows Defender is the Attack Surface Reduction (ASR) Rules. In my opinion, the ASR rules is what makes Defender such a powerful platform.
It would be great if we could include the ability to turn on, manage, and add exclusions for the ASR rules in huntress. Other competitor platforms can do this and it works quite well.
These rules exponentially expand the effectiveness of Defender.
N
Nick Whittome
As a new user of Huntress, I was surprised this wasn't included. Vital, please.
C
Charlie Klemm
Just curious if there are any updates related to the ASR Rules?
Josh Lambert [Product Manager - Huntress]
under review
Mason Schmitt
In a separate request, Huntress has said that they are working on expanding the feature set of MAV and they specifically said that ASR is part of that effort.
B
Brian Cook
Maybe i'm wrong, but I thought ASR rules was only in the enterprise licensed version of Windows Defender and Huntress works only on the free version.
C
Charlie Harris
Brian Cook: inquiring minds want to know too!
E
Eduardo Graham
The microsoft defender docs say that the feature is available in the free (Microsoft Defender Antivirus) version... but you need the licensed version to monitor the results. So this seems like a great play for Huntress to pick up management and monitoring of the feature! More details here: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction?view=o365-worldwide