Reply to thread

Message

<blockquote data-quote="Hi Brothers" data-source="post: 743938" data-attributes="member: 71794">I searched my damn hardest but I couldn&#039;t find how or where to set the &quot;criteria set by admins&quot;Funnily enough, it turns out that ASR Exclusions only work on Windows 10 Enterprise (or Server), yet you can enable ASR on Windows 10 ProAt least that&#039;s what I get from here: <a href="https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard" target="_blank">Use Attack surface reduction rules to prevent malware infection</a> , I haven&#039;t tested it but the Evaluate page says you can use ASR on Windows 10 Pro, so does the Enable page, however the Customize page says it only applies to Windows 10 Enterprise (or Server), while the Troubleshoot page saysHowever the demo tool only supports 7 rules, Block executable files from running unless they meet a prevalence, age, or trusted list criteria not being one of them, and it gives me unhandled exceptions anyway, you can find it on the Evaluate pageYou can try to use Audit mode and see what this rule would block with a lot of testing. But then again, why do that when you can just use Windows Defender (or your preferred AV) + something like appguard / voodoo shield / nvt exe radar pro instead of troubling yourself with this stupid thing</blockquote>

[QUOTE="Hi Brothers, post: 743938, member: 71794"] I searched my damn hardest but I couldn't find how or where to set the "criteria set by admins" Funnily enough, it turns out that ASR Exclusions only work on Windows 10 Enterprise (or Server), yet you can enable ASR on Windows 10 Pro At least that's what I get from here: [URL='https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard']Use Attack surface reduction rules to prevent malware infection[/URL] , I haven't tested it but the Evaluate page says you can use ASR on Windows 10 Pro, so does the Enable page, however the Customize page says it only applies to Windows 10 Enterprise (or Server), while the Troubleshoot page says However the demo tool only supports 7 rules, Block executable files from running unless they meet a prevalence, age, or trusted list criteria not being one of them, and it gives me unhandled exceptions anyway, you can find it on the Evaluate page You can try to use Audit mode and see what this rule would block with a lot of testing. But then again, why do that when you can just use Windows Defender (or your preferred AV) + something like appguard / voodoo shield / nvt exe radar pro instead of troubling yourself with this stupid thing [/QUOTE]

Verification