Windows 10: Exploit Protect/System Settings

Hey there!I just have a simple question to ask, nothing too technical.I was just wondering for the sake of knowledge and education,what is the difference between, "Use default On" vs "On by default" in the exploit protection settings?If you can explain, can you do so in layman's terms or with an analogy? Thanks again for your input!

:)

 

Exploit Protection Settings

Open Windows Defender Security Center and click on
App & browser control and there find Exploit protection settings
and you could change settings for Exploit protection from there.

 

Exploit Protection Settings

The Exploit Protection settings are preconfigured; and home users should generally just leave them alone:



The Use default configuration for each of the mitigation settings indicates our recommendation for a base level of protection for everyday usage for home users. Enterprise deployments should consider the protection required for
their individual needs and may need to modify configuration away from the defaults.



https://docs.microsoft.com/en-us/wi...er-exploit-guard/customize-exploit-protection



https://docs.microsoft.com/en-us/wi...xploit-guard/exploit-protection-exploit-guard



The preconfigured applications have been optimized by Microsoft – and adding customizations for other apps requires both a rationale and an understanding of the potential consequences, since haphazardly changing the default settings for an app can
easily render it dysfunctional.



It’s ironic that these application mitigations are exposed in the Windows Defender Security Center interface, while the safe and simple Windows Defender configuration options are only available via the PowerShell Set-MpPreference command line:



https://docs.microsoft.com/en-us/powershell/module/defender/set-mppreference?view=win10-ps



The Set-MpPreference cmdlet now also includes the parameters for Attack Surface Reduction and Block at First Sight:



Windows Defender Detection rate

 

Windows Security Exploit Protection settings

Dear all

In Windows Security > App- and browser control > Exploit Protection > Program settings

There is a list of .exe files and you can add more prorgrams

1.
What are those .exe files on the list?
What does this list do?

2.
Under some of the .exe files, it says "1 detention by system"
What does that mean?

Thanks in advance for replying

Best regards