Security Recommendations
Defender security recommendations with the Secure Now controlled remediation workflow.
Total8
Open1
Verified0
Score impact available53.1
| Recommendation | Severity | Category | Devices | CVEs | Score impact | Status | |
|---|---|---|---|---|---|---|---|
|
Update Microsoft Edge and Google Chrome to latest versions
๐ ๏ธ How to fix: Deploy browser updates via software management.
Method: Patch Management
|
Medium | Application | 6 | CVE-2023-4863 | +5.5 | In Progress | |
|
Enable Windows Firewall on all endpoints
๐ ๏ธ How to fix: Enable and enforce firewall profiles via policy.
Method: Endpoint Policy
|
Medium | Network Protection | 2 | - | +4.8 | In Progress | |
|
Remove deprecated SMBv1 protocol
๐ ๏ธ How to fix: Disable SMBv1 on all Windows systems.
Method: Group Policy
|
Medium | Network Protection | 3 | - | +3.5 | Registry Required | |
|
Enable periodic AV scanning for devices with real-time protection off
๐ ๏ธ How to fix: Enable periodic scanning policy.
Method: Endpoint Policy
|
Medium | Antivirus | 1 | - | +2.5 | In Progress | |
|
Enable attack surface reduction rules
๐ ๏ธ How to fix: Enable ASR rules in Defender for Endpoint policies.
Method: Endpoint Policy
|
High | Attack Surface Reduction | 8 | - | +9.2 | In Progress | |
|
Enable Credential Guard on domain-joined devices
๐ ๏ธ How to fix: Deploy Credential Guard via Intune/Group Policy.
Method: Group Policy
|
High | Credential Protection | 4 | - | +8.0 | Registry Required | |
|
Enable controlled folder access
๐ ๏ธ How to fix: Enable controlled folder access in Defender policies.
Method: Endpoint Policy
|
High | Attack Surface Reduction | 8 | - | +7.1 | Open | |
|
Update Windows 10 and Windows 11 to the latest cumulative update
๐ ๏ธ How to fix: Deploy latest cumulative security updates via patch management.
Method: Patch Management
|
Critical | Operating System | 6 | CVE-2024-38063 | +12.5 | In Progress |
