Control Attack Surface Reduction (ASR) Rules
under review
J
Justin Smith
One of the key components of Windows Defender is the Attack Surface Reduction (ASR) Rules. In my opinion, the ASR rules is what makes Defender such a powerful platform.
It would be great if we could include the ability to turn on, manage, and add exclusions for the ASR rules in huntress. Other competitor platforms can do this and it works quite well.
These rules exponentially expand the effectiveness of Defender.
J
Joel DeTeves
Come ON guys, these are controlled with Registry keys. If InTune can do it Huntress can do it!
J
Jacob Waltisbuhl
This has been requested since 2022 and is still under review?
Seems like a critical component that should be implemented, rather than a feature for Huntress to consider...
J
Jonas Schirmer Hanssen
Jacob Waltisbuhl They need to implement this to compete with their favorite competitor Kaseya. Rocketcyber has this already :)
J
Jeffrey Hunt
THIS IS A NEED, NOT A WANT. Please Huntress, make this happen
J
Joel DeTeves
Jeffrey Hunt agreed
J
Joel DeTeves
Managing ASR through InTune is a PITA, please add this capability to Huntress, it would greatly simplify things for us
Daniel Anner
This would be absolutely amazing, even with codified M365 management this is a PITA. If integrated into the Huntress platform it would be much easier to handle
N
Nick Whittome
As a new user of Huntress, I was surprised this wasn't included. Vital, please.
C
Charlie Klemm
Just curious if there are any updates related to the ASR Rules?
J
Josh Lambert
under review
J
Jonas Schirmer Hanssen
Josh Lambert
Is this something that is being planned?
J
Joel DeTeves
Josh Lambert This is our biggest wishlist item for 2025
Mason Schmitt
In a separate request, Huntress has said that they are working on expanding the feature set of MAV and they specifically said that ASR is part of that effort.
B
Brian Cook
Maybe i'm wrong, but I thought ASR rules was only in the enterprise licensed version of Windows Defender and Huntress works only on the free version.
J
Jason Morales
Brian Cook: inquiring minds want to know too!
J
Jeff Roback
The microsoft defender docs say that the feature is available in the free (Microsoft Defender Antivirus) version... but you need the licensed version to monitor the results. So this seems like a great play for Huntress to pick up management and monitoring of the feature! More details here: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction?view=o365-worldwide
Load More
→