Merge pull request #1983 from YongRhee-MSFT/docs-editor/evaluate-exploit-protection-1732211088

Update evaluate-exploit-protection.md

Author: denisebmsft

defender-endpoint/evaluate-exploit-protection.md

@@ -118,13 +118,13 @@ The following table lists specific products that have compatibility issues with
 
 ## Enable exploit protection system settings for testing
 
-These Exploit Protection system settings are enabled by default on Windows 10 and later, Windows Server 2019 and later, and on Windows Server version 1803 core edition and later.
+These Exploit Protection system settings are enabled by default except for the Mandatory Address Space Layout Randomization (ASLR) on Windows 10 and later, Windows Server 2019 and later, and on Windows Server version 1803 core edition and later.
 
 | System settings | Setting |
 | -------- | -------- |
 | Control flow guard (CFG) | Use default (On) |
 | Data Execution Prevention (DEP) | Use default (On) |
-| Force randomization for images (Mandatory ASRL) | Use default (On) |
+| Force randomization for images (Mandatory ASRL) | Use default (Off) |
 | Randomize memory allocations (Bottom-up ASRL) | Use default (On) |
 | High-entropy ASRL | Use default (On) |
 | Validate exception chains (SEHOP) | Use default (On) |
@@ -136,7 +136,7 @@ The xml sample is available below
 <MitigationPolicy>
   <SystemConfig>
     <DEP Enable="true" EmulateAtlThunks="false" />
-    <ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="true" HighEntropy="true" />
     <ControlFlowGuard Enable="true" SuppressExports="false" />
     <SEHOP Enable="true" TelemetryOnly="false" />
     <Heap TerminateOnError="true" />