Windows 10: Is This Normal? Exploit Protection.

Earlier this week I noticed strange activity on my network and my personal laptop, particularly. I am running Windows 10 Home Version: 2004 OS Build 19041.572

I stumbled upon the Exploit Protection settings accidentally. Everything was turned off. As in, every app, every setting, had been switched to off. Surely, it does not come this way by default, right? I think someone has done this. Or is it totally normal for every app in Exploit Protection to have its EP settings to the absolute minimal to no protection?

:)

 

Edge Browser not listed on Exploit Protection

When I open the Exploit Protection Program List, how come Edge browser processes are not listed?
Or, is there another process name for MS Edge from the Exploit Protection Program List page?

However, my guess is that since Edge runs in a Sandboxed protected mode by default, maybe perhaps it is not required to be on the Exploit Protection Programs List.

 

Exploit Protection Settings

The Exploit Protection settings are preconfigured; and home users should generally just leave them alone:



The Use default configuration for each of the mitigation settings indicates our recommendation for a base level of protection for everyday usage for home users. Enterprise deployments should consider the protection required for
their individual needs and may need to modify configuration away from the defaults.



https://docs.microsoft.com/en-us/wi...er-exploit-guard/customize-exploit-protection



Apply mitigations to help prevent attacks through vulnerabilities - Windows security



The preconfigured applications have been optimized by Microsoft – and adding customizations for other apps requires both a rationale and an understanding of the potential consequences, since haphazardly changing the default settings for an app can
easily render it dysfunctional.



It’s ironic that these application mitigations are exposed in the Windows Defender Security Center interface, while the safe and simple Windows Defender configuration options are only available via the PowerShell Set-MpPreference command line:



https://docs.microsoft.com/en-us/powershell/module/defender/set-mppreference?view=win10-ps



The Set-MpPreference cmdlet now also includes the parameters for Attack Surface Reduction and Block at First Sight:



Windows Defender Detection rate

 

Exploit Protection Settings

Open Windows Defender Security Center and click on
App & browser control and there find Exploit protection settings
and you could change settings for Exploit protection from there.