🛡️ Security

Attack Surface Reduction (ASR) Rules

A set of configurable Microsoft Defender rules that block common malware behaviors, such as script interpreters launching downloaded executables or the execution of obfuscated scripts, adding behavioral guardrails independent of file signatures.

📚 Deep Dive

Learn Article

How to Harden PowerShell and the Windows Run Dialog Against Paste-and-Run Attacks

Paste-and-run attacks depend on standard users being able to execute arbitrary scripts. Here is a practical set of controls to lock down PowerShell, the Run dialog, and Windows Terminal.

intermediate 3 min read

Back to Glossary