New-ConfigWDAC

This is an advanced PowerShell module for WDAC (Windows Defender Application Control) and automates a lot of tasks.


🟢 Please see the GitHub page for Full details and everything about the module: https://github.com/HotCakeX/Harden-Windows-Security/wiki/New-ConfigWDAC


🛡️ Here is the list of parameters the module supports

✔️ New-ConfigWDAC [[-Get_RecommendedBlockRules]] [-WhatIf] [-Confirm] [<CommonParameters>]
   
✔️ New-ConfigWDAC [[-Get_RecommendedDriverBlockRules]] [-WhatIf] [-Confirm] [<CommonParameters>]

✔️ New-ConfigWDAC [[-Make_AllowMSFT_WithReccBlockRules]] [-Deployit] [-TestMode] [-RequireEVSigners] [-WhatIf] [-Confirm] [<CommonParameters>]

✔️ New-ConfigWDAC [[-Deploy_LatestDriverBlockRules]] [-WhatIf] [-Confirm] [<CommonParameters>]

✔️ New-ConfigWDAC [[-Make_ScheduledTask_AutoUpdate_DriverBlockRules]] [-WhatIf] [-Confirm] [<CommonParameters>]

✔️ New-ConfigWDAC [[-Make_PolicyFromAuditLogs]] [-Deployit] [-TestMode] [-RequireEVSigners] [-WhatIf] [-Confirm] [<CommonParameters>]

✔️ New-ConfigWDAC [[-Prep_SystemFor_MSFTOnlyAudit]] [-WhatIf] [-Confirm] [<CommonParameters>]

✔️ New-ConfigWDAC [[-Make_LightlyManagedPolicy]] [-Deployit] [-TestMode] [-RequireEVSigners] [-WhatIf] [-Confirm] [<CommonParameters>]

✔️ New-ConfigWDAC [[-ListActivePolicies]] [-WhatIf] [-Confirm] [<CommonParameters>]

✔️ New-ConfigWDAC [[-VerifyWDACStatus]] [-WhatIf] [-Confirm] [<CommonParameters>]

✔️ New-ConfigWDAC [[-Sign_Deploy_Policy]] -CertPath <String> -PolicyPaths <String[]> [-SignToolPath <String>] -CertCN <String> [-WhatIf] [-Confirm] [<CommonParameters>]

✔️ New-ConfigWDAC [[-Make_SupplementalPolicy]] -ScanLocation <String> -SuppPolicyName <String> [-Deployit] -PolicyPaths <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

✔️ New-ConfigWDAC [[-RemoveSignedPolicy]] -PolicyPaths <String[]> [-SignToolPath <String>] -CertCN <String> [-WhatIf] [-Confirm] [<CommonParameters>]

✔️ New-ConfigWDAC [[-AfterRebootRemoval]] -PolicyPaths <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

✔️ New-ConfigWDAC [[-RemoveUNsignedPolicy]] [-PolicyIDs <String[]>] [-PolicyNames <String[]>] [-WhatIf] [-Confirm] [<CommonParameters>]


REMARKS
To see the syntax, type: "get-help New-ConfigWDAC"