Skip to content

Commit c3d872f

Browse files
authored
Update attack-surface-reduction-rules-reference.md
Added note that cloud protection is required for block execution of potentially obfuscated scripts.
1 parent 4e6ec31 commit c3d872f

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

defender-endpoint/attack-surface-reduction-rules-reference.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -408,8 +408,11 @@ Dependencies: Microsoft Defender Antivirus, Cloud Protection
408408

409409
This rule detects suspicious properties within an obfuscated script.
410410

411+
> [!NOTE]
412+
> PowerShell scripts are now supported for the "Block execution of potentially obfuscated scripts" rule.
413+
411414
> [!IMPORTANT]
412-
> PowerShell scripts are now supported for the "Block execution of potentially obfuscated scripts" rule.
415+
> You must enable cloud-delivered protection to use this rule.
413416
414417
Script obfuscation is a common technique that both malware authors and legitimate applications use to hide intellectual property or decrease script loading times. Malware authors also use obfuscation to make malicious code harder to read, which hampers close scrutiny by humans and security software.
415418

0 commit comments

Comments
 (0)