MDE attack surface reduction and Teams meetings

Cristian Nitu 21 Reputation points
2022-08-12T13:29:03.883+00:00

Hi all,

We have an ASR rule to block executable content from email client and webmail.

Unfortunately, this rule blocks "Metting options" in a Teams meeting.

Is there a possibility of creating an exception? A path-rule exception doesn't seem to be an option.

230630-screenshot-2022-08-12-081708.jpg

230783-screenshot-2022-08-12-081747.jpg

Outlook Management
Outlook Management
Outlook: A family of Microsoft email and calendar products.Management: The act or process of organizing, handling, directing or controlling something.
4,887 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,754 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Limitless Technology 43,941 Reputation points
    2022-08-17T15:12:37.317+00:00

    Hello there,

    If this is the first time you are deploying ASR please check the prerequisites.

    There are four steps to troubleshooting these problems:

    Confirm prerequisites
    Use audit mode to test the rule
    Add exclusions for the specified rule (for false positives)
    Submit support logs

    Troubleshoot attack surface reduction rules https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/troubleshoot-asr?view=o365-worldwide

    Hope this resolves your Query !!

    ---

    --If the reply is helpful, please Upvote and Accept it as an answer–

    0 comments