Security Baselines & Defender for Business

A configured device is not a hardened device. This part layers Microsoft's pre-built security baselines on top of your configuration profiles, connects Defender for Business, and starts Attack Surface Reduction in Audit mode.