├── .gitattributes ├── .github ├── ISSUE_TEMPLATE │ ├── bug_report.md │ └── feature_request.md └── workflows │ └── virustotal.yml ├── Files ├── BIN │ ├── WDAC_V1_Default_Audit.bin │ ├── WDAC_V1_Default_Enforced.bin │ ├── WDAC_V1_Recommended_Audit.bin │ └── WDAC_V1_Recommended_Enforced.bin ├── CIP │ ├── WDAC_V1_Default_Audit │ │ └── {39022AE9-83C0-49F6-81B9-B1CCD1871EDA}.cip │ ├── WDAC_V1_Default_Enforced │ │ └── {39022AE9-83C0-49F6-81B9-B1CCD1871EDA}.cip │ ├── WDAC_V1_Recommended_Audit │ │ └── {39022AE9-83C0-49F6-81B9-B1CCD1871EDA}.cip │ └── WDAC_V1_Recommended_Enforced │ │ └── {39022AE9-83C0-49F6-81B9-B1CCD1871EDA}.cip ├── CUSTOM EVENT VIEW │ └── WDAG Events.xml ├── EXECUTABLES │ └── RefreshPolicy(AMD64).exe ├── SAMPLES │ ├── .NET Hardening.xml │ ├── Allow All COM Objects.xml │ ├── AllowAll.xml │ ├── AllowAll_EnableHVCI.xml │ ├── AllowMicrosoft.xml │ ├── DefaultWindows_Audit.xml │ ├── DefaultWindows_Enforced.xml │ ├── DenyAllAudit.xml │ ├── Intelligent Security Graph.xml │ ├── Recommended Block Rules.xml │ └── Recommended Driver Block Rules.xml ├── SOS-Convert-WDAC-XML-2-BIN.ps1 └── XML │ ├── WDAC_V1_Default_Audit.xml │ ├── WDAC_V1_Default_Enforced.xml │ ├── WDAC_V1_Recommended_Audit.xml │ └── WDAC_V1_Recommended_Enforced.xml ├── LICENSE ├── README.md └── sos-wdachardening.ps1 /.gitattributes: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/.gitattributes -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/bug_report.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/.github/ISSUE_TEMPLATE/bug_report.md -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/feature_request.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/.github/ISSUE_TEMPLATE/feature_request.md -------------------------------------------------------------------------------- /.github/workflows/virustotal.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/.github/workflows/virustotal.yml -------------------------------------------------------------------------------- /Files/BIN/WDAC_V1_Default_Audit.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/BIN/WDAC_V1_Default_Audit.bin -------------------------------------------------------------------------------- /Files/BIN/WDAC_V1_Default_Enforced.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/BIN/WDAC_V1_Default_Enforced.bin -------------------------------------------------------------------------------- /Files/BIN/WDAC_V1_Recommended_Audit.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/BIN/WDAC_V1_Recommended_Audit.bin -------------------------------------------------------------------------------- /Files/BIN/WDAC_V1_Recommended_Enforced.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/BIN/WDAC_V1_Recommended_Enforced.bin -------------------------------------------------------------------------------- /Files/CIP/WDAC_V1_Default_Audit/{39022AE9-83C0-49F6-81B9-B1CCD1871EDA}.cip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/CIP/WDAC_V1_Default_Audit/{39022AE9-83C0-49F6-81B9-B1CCD1871EDA}.cip -------------------------------------------------------------------------------- /Files/CIP/WDAC_V1_Default_Enforced/{39022AE9-83C0-49F6-81B9-B1CCD1871EDA}.cip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/CIP/WDAC_V1_Default_Enforced/{39022AE9-83C0-49F6-81B9-B1CCD1871EDA}.cip -------------------------------------------------------------------------------- /Files/CIP/WDAC_V1_Recommended_Audit/{39022AE9-83C0-49F6-81B9-B1CCD1871EDA}.cip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/CIP/WDAC_V1_Recommended_Audit/{39022AE9-83C0-49F6-81B9-B1CCD1871EDA}.cip -------------------------------------------------------------------------------- /Files/CIP/WDAC_V1_Recommended_Enforced/{39022AE9-83C0-49F6-81B9-B1CCD1871EDA}.cip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/CIP/WDAC_V1_Recommended_Enforced/{39022AE9-83C0-49F6-81B9-B1CCD1871EDA}.cip -------------------------------------------------------------------------------- /Files/CUSTOM EVENT VIEW/WDAG Events.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/CUSTOM EVENT VIEW/WDAG Events.xml -------------------------------------------------------------------------------- /Files/EXECUTABLES/RefreshPolicy(AMD64).exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/EXECUTABLES/RefreshPolicy(AMD64).exe -------------------------------------------------------------------------------- /Files/SAMPLES/.NET Hardening.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/SAMPLES/.NET Hardening.xml -------------------------------------------------------------------------------- /Files/SAMPLES/Allow All COM Objects.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/SAMPLES/Allow All COM Objects.xml -------------------------------------------------------------------------------- /Files/SAMPLES/AllowAll.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/SAMPLES/AllowAll.xml -------------------------------------------------------------------------------- /Files/SAMPLES/AllowAll_EnableHVCI.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/SAMPLES/AllowAll_EnableHVCI.xml -------------------------------------------------------------------------------- /Files/SAMPLES/AllowMicrosoft.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/SAMPLES/AllowMicrosoft.xml -------------------------------------------------------------------------------- /Files/SAMPLES/DefaultWindows_Audit.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/SAMPLES/DefaultWindows_Audit.xml -------------------------------------------------------------------------------- /Files/SAMPLES/DefaultWindows_Enforced.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/SAMPLES/DefaultWindows_Enforced.xml -------------------------------------------------------------------------------- /Files/SAMPLES/DenyAllAudit.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/SAMPLES/DenyAllAudit.xml -------------------------------------------------------------------------------- /Files/SAMPLES/Intelligent Security Graph.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/SAMPLES/Intelligent Security Graph.xml -------------------------------------------------------------------------------- /Files/SAMPLES/Recommended Block Rules.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/SAMPLES/Recommended Block Rules.xml -------------------------------------------------------------------------------- /Files/SAMPLES/Recommended Driver Block Rules.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/SAMPLES/Recommended Driver Block Rules.xml -------------------------------------------------------------------------------- /Files/SOS-Convert-WDAC-XML-2-BIN.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/SOS-Convert-WDAC-XML-2-BIN.ps1 -------------------------------------------------------------------------------- /Files/XML/WDAC_V1_Default_Audit.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/XML/WDAC_V1_Default_Audit.xml -------------------------------------------------------------------------------- /Files/XML/WDAC_V1_Default_Enforced.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/XML/WDAC_V1_Default_Enforced.xml -------------------------------------------------------------------------------- /Files/XML/WDAC_V1_Recommended_Audit.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/XML/WDAC_V1_Recommended_Audit.xml -------------------------------------------------------------------------------- /Files/XML/WDAC_V1_Recommended_Enforced.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/Files/XML/WDAC_V1_Recommended_Enforced.xml -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/README.md -------------------------------------------------------------------------------- /sos-wdachardening.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/simeononsecurity/Windows-Defender-Application-Control-Hardening/HEAD/sos-wdachardening.ps1 --------------------------------------------------------------------------------