The pattern
Platform - Policy type - Purpose - Ring
WIN-ASR-BlockOfficeMacros-PILOT
31 of 64 characters for a policy or profile
What each part means
| Part | Here | What it says | Other values |
|---|---|---|---|
| Platform | WIN | The operating system. | MAC, IOS, AND, LNX, WEB |
| Policy type | ASR | The kind of policy or profile. | CONF, COMP, SEC, APP, UPD |
| Purpose | BlockOfficeMacros | What the item does, in your own words. | free text |
| Ring | PILOT | The deployment ring or environment that receives it. | PRD, CAN, DEV, TEST, UAT |
Parts are joined with “-”. In the builder you can change every value, the separator and the order, add parts and remove them.
When to use it
For attack surface reduction rules, which are usually tried in audit mode with a pilot ring before they block anything.
- While testing, put the mode in the purpose: AuditOfficeMacros first, BlockOfficeMacros later.
- One policy per group of rules keeps the exclusions manageable.
More names in this pattern
- WIN-ASR-BlockOfficeMacros-PILOT
- WIN-ASR-AuditOfficeMacros-PILOT
- WIN-ASR-BlockCredentialTheft-PRD
- WIN-ASR-BlockUsbExecutables-PILOT