(GA) Attack Surface Reduction (ASR) Rules

(GA) Attack Surface Reduction (ASR) Rules

Two new ASR rules are now generally available:

• Block rebooting machine in Safe Mode: This rule prevents the execution of commands to restart machines in Safe Mode.
• Block use of copied or impersonated system tools: This rule blocks the use of executable files that are identified as copies of Windows system tools. These files are either duplicates or impostors of the original system tools.
• (GA) Defender for Endpoint supports ARM64-based Linux servers across various Linux distributions, including Ubuntu, RHEL, Debian, SUSE Linux, Amazon Linux, and Oracle Linux. All product capabilities that are supported on AMD64 devices are now supported on ARM64-based Linux servers.