Cloud-Delivery Protection on (some rules require that).Windows Defender Antivirus as primary AV (real-time protection on).To use the entire feature-set of attack surface reduction rules, you need: Windows Server, version 1803 (Semi-Annual Channel) or later.Windows 10 Enterprise, version 1709 or later.You can set attack surface reduction rules for devices that are running any of the following editions and versions of Windows: RequirementsĪttack surface reduction features across Windows versions Want to experience Defender for Endpoint? Sign up for a free trial.Īttack surface reduction rules (ASR rules) help prevent actions that malware often abuses to compromise devices and networks.