Control Attack Surface Reduction (ASR) Rules
under review
R
Rubye'la Murphy'la
One of the key components of Windows Defender is the Attack Surface Reduction (ASR) Rules. In my opinion, the ASR rules is what makes Defender such a powerful platform.
It would be great if we could include the ability to turn on, manage, and add exclusions for the ASR rules in huntress. Other competitor platforms can do this and it works quite well.
These rules exponentially expand the effectiveness of Defender.
J
Jeffrey Hunt
THIS IS A NEED, NOT A WANT. Please Huntress, make this happen
J
Joel DeTeves
Jeffrey Hunt agreed
J
Joel DeTeves
Managing ASR through InTune is a PITA, please add this capability to Huntress, it would greatly simplify things for us
Daniel Anner
This would be absolutely amazing, even with codified M365 management this is a PITA. If integrated into the Huntress platform it would be much easier to handle
N
Nick Whittome
As a new user of Huntress, I was surprised this wasn't included. Vital, please.
C
Charlie Klemm
Just curious if there are any updates related to the ASR Rules?
S
Salley'la Auer'la
under review
J
Jonas Schirmer Hanssen
Salley'la Auer'la
Is this something that is being planned?
J
Joel DeTeves
Salley'la Auer'la This is our biggest wishlist item for 2025
Mason Schmitt
In a separate request, Huntress has said that they are working on expanding the feature set of MAV and they specifically said that ASR is part of that effort.
B
Brian Cook
Maybe i'm wrong, but I thought ASR rules was only in the enterprise licensed version of Windows Defender and Huntress works only on the free version.
S
Shirlee'la Leuschke'la
Brian Cook: inquiring minds want to know too!
L
Lonnie'la Okuneva'la
The microsoft defender docs say that the feature is available in the free (Microsoft Defender Antivirus) version... but you need the licensed version to monitor the results. So this seems like a great play for Huntress to pick up management and monitoring of the feature! More details here: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction?view=o365-worldwide