Note: At time of writing there is no Windows Defender Exploit Guard profile available neither in Configuration Manager & Microsoft Intune. However there is a Windows 10 Configuration Service Provider (CSP) for Windows Defender Exploit Guard which make it’s possible to configure Exploit Guard using Microsoft Intune (or other MDM solutions). The configuration of Windows Defender Exploit Guard is currently documented for using PowerShell and Group Policies. The score of Windows Defender Exploit Guard is measured against the below improvement areas including cloud-based protection. Controlled Folder Access helps protect files in key system folders from changes made by malicious and suspicious apps, including file-encrypting ransomware malware.Network Protection extends the malware and social engineering protection offered by Windows Defender SmartScreen in Edge to cover network traffic and connectivity on your organization’s devices.Attack Surface Reduction rules can reduce the attack surface of your applications with intelligent rules that stop the vectors used by Office-, script- and mail-based malware.Exploit Protection can apply exploit mitigation techniques to apps your organization uses, both individually and to all apps.There are four features in Windows Defender Exploit Guard:

Windows Defender Exploit Guard (Windows Defender EG) is a new set of host intrusion prevention capabilities for Windows 10, allowing you to manage and reduce the attack surface of apps used by your employees. In this blog I’ll cover two other improvement areas: Windows Defender Exploit Guard and SmartScreen In my previous blog I highlighted the Security Analytics Dashboard of the Windows Defender Advanced Threat Protection and how to improve your organizations security excellence covering two improvement area’s: Windows Defender Antivirus and Windows Defender Application Guard.

Defender smart screen