Attack Surface Reduction Rules Explained