We continue our #intune deep dive by looking at #asrrules

#blueteam #cybersecurity #securebydesign

https://strategic-cyber.co.uk/2024/05/02/microsoft-intune-15-attack-surface-reduction-rules/

What if all of this was a ploy to get people to use advanced hunting / E5 #asr #asrrules #defender #signature #ASRmagedon #ASRmageddon

Good Summary including links, KQL, PowerShell, etc.

https://rodtrent.com/nh9

#KQL #PowerShell #ASRRules #MicrosoftDefender