Author: Chris Hoffman / Source: howtogeek.com
Windows 10’s Redstone 5 update, scheduled for release in Fall, 2018, includes a new “Block Suspicious Behaviors” security feature. This protection is off by default, but you can enable it to protect your PC from a variety of threats.
| Print Manager Plus | |
| |
| The #1 Print Management Software on the market. Free 30 Day … | |
| printmanager.com | |
| Learn more |
What Does “Block Suspicious Behaviors” Do?
This feature has a pretty vague name. However, Microsoft’s documentation clarifies that “Block Suspicious Behaviors” is just a friendly name for the “Windows Defender Exploit Guard attack surface reduction technology.” This security feature was introduced in the Fall Creators Update, but was only available in Windows 10 Enterprise. In Redstone 5, it’s now available to everyone via an option in Windows Security.
When you enable this feature, Windows 10 activates a variety of security rules. These rules disable features normally only used by malware, helping protect your PC from attack.
Here are some of the attack surface reduction rules:
- Block executable content from email client and webmail
- Block Office applications from creating child processes
- Block Office applications from creating executable content
- Block Office applications from injecting code into other processes
- Block JavaScript or VBScript from launching downloaded executable content
- Block execution of potentially obfuscated scripts
- Block Win32 API calls from Office macro
- Block credential stealing from the Windows local security authority subsystem (lsass. exe)
- Block process creations originating from PSExec and WMI commands
- Block untrusted and unsigned processes that run from USB
- Block Office communication applications from…
The post What is the New “Block Suspicious Behaviors” Feature in Windows 10? appeared first on FeedBox.