Skip to main content
ENDPOINT-SECURITY5 MIN READ

Sort ASR controls by the surface they reduce

Categorize attack surface reduction controls by the endpoint surface they reduce.

Place each endpoint hardening control in the surface it primarily reduces. Risky Software Behavior Network and Web Data Modification Peripheral Devices Exploit Mitigation Block Office apps from creating child processes Audit obfuscated script execution Block outbound traffic to low-reputation domains Apply web threat protection to roaming laptops Prevent untrusted apps from modifying protected folders Alert on mass writes to finance document folders Restrict USB storage write access Limit unauthorized Bluetooth peripheral use Apply exploit mitigations to vulnerable desktop applications Audit exploit protection compatibility for a legacy app

Read the full lesson

Sign up free — one personalized lesson every day, matched to your role and goals.

Already have an account? Sign in

← Back to library
Contact us