Figure 9. Windows Defender ATP view of the Windows Defender Exploit Guard event. Adding Windows Defender Exploit Guard EAF audit/block policy to common system processes like explorer.exe, cmd.exe, or ...