├── AppLocker Event Forwarding ├── AppLocker Event Forwarding Subscription Query Filter.xml ├── AppLocker Events grouped by File.ps1 └── AppLocker Events to CSV.ps1 ├── AppLocker Starter Policy ├── Windows10_AppLocker Starter Policy.xml └── Windows11_AppLocker Starter Policy.xml ├── Create AppLocker Meta Events ├── AppLocker Event Forwarding Subscription Meta Event Query Filter xml ├── AppLocker Meta Events Custom View.xml ├── AppLocker Meta Events grouped by File.ps1 ├── AppLocker Meta Events to CSV.ps1 ├── Create AppLocker Meta Event Task.bat ├── Create AppLocker Meta Event Task.xml └── Create AppLocker Meta Event.ps1 ├── Create AppLocker Popup Task ├── AppLocker Popup Alert Task.xml └── Create AppLocker Popup Task.bat ├── DISCLAIMER.md ├── Event Viewer AppLocker Custom View └── AppLocker Event Viewer Custom View.xml ├── LICENSE.md └── README.md /AppLocker Event Forwarding/AppLocker Event Forwarding Subscription Query Filter.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/AppLocker Event Forwarding/AppLocker Event Forwarding Subscription Query Filter.xml -------------------------------------------------------------------------------- /AppLocker Event Forwarding/AppLocker Events grouped by File.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/AppLocker Event Forwarding/AppLocker Events grouped by File.ps1 -------------------------------------------------------------------------------- /AppLocker Event Forwarding/AppLocker Events to CSV.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/AppLocker Event Forwarding/AppLocker Events to CSV.ps1 -------------------------------------------------------------------------------- /AppLocker Starter Policy/Windows10_AppLocker Starter Policy.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/AppLocker Starter Policy/Windows10_AppLocker Starter Policy.xml -------------------------------------------------------------------------------- /AppLocker Starter Policy/Windows11_AppLocker Starter Policy.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/AppLocker Starter Policy/Windows11_AppLocker Starter Policy.xml -------------------------------------------------------------------------------- /Create AppLocker Meta Events/AppLocker Event Forwarding Subscription Meta Event Query Filter xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/Create AppLocker Meta Events/AppLocker Event Forwarding Subscription Meta Event Query Filter xml -------------------------------------------------------------------------------- /Create AppLocker Meta Events/AppLocker Meta Events Custom View.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/Create AppLocker Meta Events/AppLocker Meta Events Custom View.xml -------------------------------------------------------------------------------- /Create AppLocker Meta Events/AppLocker Meta Events grouped by File.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/Create AppLocker Meta Events/AppLocker Meta Events grouped by File.ps1 -------------------------------------------------------------------------------- /Create AppLocker Meta Events/AppLocker Meta Events to CSV.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/Create AppLocker Meta Events/AppLocker Meta Events to CSV.ps1 -------------------------------------------------------------------------------- /Create AppLocker Meta Events/Create AppLocker Meta Event Task.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/Create AppLocker Meta Events/Create AppLocker Meta Event Task.bat -------------------------------------------------------------------------------- /Create AppLocker Meta Events/Create AppLocker Meta Event Task.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/Create AppLocker Meta Events/Create AppLocker Meta Event Task.xml -------------------------------------------------------------------------------- /Create AppLocker Meta Events/Create AppLocker Meta Event.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/Create AppLocker Meta Events/Create AppLocker Meta Event.ps1 -------------------------------------------------------------------------------- /Create AppLocker Popup Task/AppLocker Popup Alert Task.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/Create AppLocker Popup Task/AppLocker Popup Alert Task.xml -------------------------------------------------------------------------------- /Create AppLocker Popup Task/Create AppLocker Popup Task.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/Create AppLocker Popup Task/Create AppLocker Popup Task.bat -------------------------------------------------------------------------------- /DISCLAIMER.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/DISCLAIMER.md -------------------------------------------------------------------------------- /Event Viewer AppLocker Custom View/AppLocker Event Viewer Custom View.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/Event Viewer AppLocker Custom View/AppLocker Event Viewer Custom View.xml -------------------------------------------------------------------------------- /LICENSE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/LICENSE.md -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/AppLocker-Guidance/HEAD/README.md --------------------------------------------------------------------------------