What's New
Important
How To Install: Copy and Paste this command in a PowerShell window as Admin. (Technical explanation available here)
(irm 'https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/main/Harden-Windows-Security.ps1')+'AppControl'|iex-
The AppControl Manager now supports 3 more rule types for both Supplemental policies and Deny base policies:
- File path rules for each file.
- File path rules based on wildcards for each folder (that means any file that resides in the selected folder will be automatically allowed).
- PFN based rules for packaged apps (Package Family Name)
-
With these 3 additional rule types, you can allow your apps, files and folders in new ways that suit your needs.
-
Keep in mind that the most secure rule types are signature based ones such as FilePublisher.
- Read more about rule type security in this article: https://github.com/HotCakeX/Harden-Windows-Security/wiki/WDAC-Rule-Levels-Comparison-and-Guide
-
Removed the static color for text highlights in flyout text boxes. The colors are now dynamically set based on the Windows accent color.
-
The "Get Configuration" button in the Settings page now automatically expands the section to make the configurations visible, reducing extra clicks/taps needed.
-
The Create policy page's deploy buttons are now consistent with the rest of the deploy buttons in the app.
-
Improved consistency in the codebase and UI elements.
-
Added documentation for creating Deny policies => https://github.com/HotCakeX/Harden-Windows-Security/wiki/How-to-Create-an-App-Control-Deny-Policy
-
When parsing the Microsoft Defender for Endpoint Advanced Hunting logs, Blocked events would show as Audit events in the data grid, that is now fixed.
Automated Release Notes
- AppControl-Manager-DownloadLink-Version-Update-Version-1.8.5.0 by @github-actions in #545
- The old WDACConfig PowerShell module has been fully deprecated by @HotCakeX in #553
- Implementing FilePath and PFN based rules in AppControl Manager by @HotCakeX in #554
- Fixed Audit/Block categorization of the MDE Advanced Hunting data by @HotCakeX in #557
- docs: remove empty image tag from WDAC Notes.md by @HryshcIlya in #558
- Code refactoring and general improvements by @HotCakeX in #560
- Version bump to 1.8.6.0 - AppControl Manager by @HotCakeX in #561
Full Changelog: AppControlManager.v.1.8.5.0...AppControlManager.v.1.8.6.0
Note
As mentioned at the top, please refer to this page for installation instructions.
