Application Control
App Control managed installer, ISG and supplemental policies
Keep App Control for Business maintainable: trust Intune or ConfigMgr as a managed installer, use ISG carefully and delegate with supplemental policies.
Advanced
Guides tagged
#app-control
Application Control
Microsoft vulnerable driver blocklist: stop BYOVD
Enable and verify the Microsoft vulnerable driver blocklist on clients and servers, keep it current and detect bring-your-own-vulnerable-driver attacks.
Intermediate
Application Control
App Control for Business (WDAC) vs AppLocker
Choose between App Control for Business (formerly WDAC) and AppLocker, start from Microsoft's example policies, audit, read Code Integrity events and enforce without breaking apps.
Intermediate