D1e49aac 8f56 2024 B9ba 993a6d77406c. This is not mentioned anywhere in the exploit guard documentation. This blog post is focused on how to configure microsoft defender atp asr rules and how to work your way through exclusions.

Let’s examine what attack surface reduction rules are, as well as a list of the asr configurable rules. The mitigation block credential stealing from the windows local security authority subsystem (lsass.exe) can block some schtaks.exe processes.