Microsoft Defender for Business
Vulnerabilities and exposureAttack Surface Reduction in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn
In brief
The page title and heading now capitalize “Attack Surface Reduction.” The text also uses “cyberattack” and revises punctuation around configuration method examples.
What Defender admins need to know
No administrator action is required; the documented configuration methods are unchanged.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Attack surface reductionSurface Reduction in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn
Attack surfaces are all the places and ways the network and devices in your organization are vulnerable to attacks.cyberattack. For example:
- Unsecured devices.
- Unrestricted access to URLs on company devices.
Note
Microsoft 365 Business Premium includes Microsoft Intune Plan 1, which is the recommended method to configure and deploy security features on devices. Standalone Defender for Business doesn't include Intune, so you need to use another configuration method (formethod, for example, Group Policy or PowerShell locally on devices).devices.
- Attack surface reduction (ASR) rules: For more information, see Deployment and configuration methods for ASR rules and ASR rules deployment guide.
- Controlled folder access (CFA): For more information, see Deployment and configuration methods for CFA.
@@ -1,6 +1,6 @@ --- layout: Conceptual-title: Attack surface reduction in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn+title: Attack Surface Reduction in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn canonicalUrl: https://learn.microsoft.com/en-us/defender-business/mdb-asr breadcrumb_path: /defender-business/breadcrumb/toc.json feedback_system: Standard@@ -47,9 +47,9 @@ spProducts: platformId: 5b5fcb2f-83d9-413b-e8bb-e4ff9b6bb092 --- -# Attack surface reduction in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn+# Attack Surface Reduction in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn -*Attack surfaces* are all the places and ways the network and devices in your organization are vulnerable to attacks. For example:
+*Attack surfaces* are all the places and ways the network and devices in your organization are vulnerable to cyberattack. For example:
- Unsecured devices.
- Unrestricted access to URLs on company devices.
@@ -69,7 +69,7 @@ To help protect your network and devices, Microsoft Defender for Business includ
Note
-Microsoft 365 Business Premium includes Microsoft Intune Plan 1, which is the recommended method to configure and deploy security features on devices. Standalone Defender for Business doesn't include Intune, so you need to use another configuration method (for example, Group Policy or PowerShell locally on devices).
+Microsoft 365 Business Premium includes Microsoft Intune Plan 1, which is the recommended method to configure and deploy security features on devices. Standalone Defender for Business doesn't include Intune, so you need to use another configuration method, for example, Group Policy or PowerShell locally on devices.
- **Attack surface reduction (ASR) rules**: For more information, see [Deployment and configuration methods for ASR rules](/en-us/defender-endpoint/attack-surface-reduction-rules-overview#deployment-and-configuration-methods-for-asr-rules) and [ASR rules deployment guide](/en-us/defender-endpoint/attack-surface-reduction-rules-deployment).
- **Controlled folder access (CFA)**: For more information, see [Deployment and configuration methods for CFA](/en-us/defender-endpoint/controlled-folder-access-overview#deployment-and-configuration-methods-for-cfa).