Use Intune to configure your attack surface reduction rules. Other attack surface reduction capabilities can be configured in the Microsoft 365 Defender portal. See Attack surface reduction capabilities in Defender for Business.