Block Malware in Office Macros using Attack Surface Reduction in Windows 10

Sometimes you don't need an expensive security solution to provide the basic level of protection against common threats like macros in an Office document. Check out how Attack Surface Reduction rules built in to Windows 10 Professional and Enterprise can stop these attacks before they start - and do it at no cost! Table of Contents: 00:00:00 Intro 00:00:20 Make it Real 00:00:52 ASR To Rescue! 00:01:25 Final Thoughts The ASR rule used in the demo was "Block all Office applications from creating child processes" (D4F940AB-401B-4EFC-AADC-AD5F3C50688A). For more information on Attack Surface Reduction Rules see https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction#block-all-office-applications-from-creating-child-processes See my video on Attack Surface Reduction: https://www.youtube.com/watch?v=36OJHS-4VhE Matt is an IT Pro and a Security Architect at Microsoft. He runs one of the top TechNet blogs at http://aka.ms/MattsBlog and his own blog at www.mattsoseman.com in addition to this channel. His goal is to help other IT professionals thrive in their career! Note: The views and expressions on my videos do not represent those of my employer and are strictly my own. All content provided on this channel is for informational purposes only. The owner of this channel makes no representations as to the accuracy or completeness of any information on this site or found by following any link on this channel. The owner of this channel will not be liable for any errors or omissions in this information nor for the availability of this information. The owner will not be liable for any losses, injuries, or damages from the display or use of this information. These terms and conditions is subject to change at anytime with or without notice.