[rwth-security] Microsoft Defender Attack Surface Reduction recommendations