Skip to content

Commit e5b1fe0

Browse files
committed
Update attack-surface-reduction-rules-reference.md
1 parent c9d0ec8 commit e5b1fe0

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

defender-endpoint/attack-surface-reduction-rules-reference.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -180,10 +180,10 @@ Toast notifications are generated for all rules in Block mode. Rules in any othe
180180

181181
For rules with the "Rule State" specified:
182182

183-
- ASR rules with \<ASR Rule, Rule State\> combinations are used to surface alerts (toast notifications) on Microsoft Defender for Endpoint only for devices at cloud block level **High**. Devices not at High cloud block level won't generate alerts for any <ASR Rule, Rule State> combinations
183+
- ASR rules with `\ASR Rule, Rule State\` combinations are used to surface alerts (toast notifications) on Microsoft Defender for Endpoint only for devices at cloud block level **High**. Devices not at the high cloud block level don't generate alerts for any `ASR Rule, Rule State` combinations
184184
- EDR alerts are generated for ASR rules in the specified states, for devices at cloud block level **High+**
185185

186-
| Rule name | Rule state | Generates alerts in EDR? | Generates toast notifications? |
186+
| Rule name | Rule state | EDR alerts? | Toast notifications? |
187187
|---|---|---|---|
188188
| | | _Only for devices at cloud block level **High+**_ | _In Block mode only_ and _only for devices at cloud block level **High**_|
189189
|[Block abuse of exploited vulnerable signed drivers](#block-abuse-of-exploited-vulnerable-signed-drivers) | | N | Y |

0 commit comments

Comments
 (0)