wdac

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨

Harden Windows with Windows Defender Application Control (WDAC)

Easily create, deploy, and edit Windows Defender Application Control (WDAC) policies. Allows for careful review of app information before trusting WDAC rules. Manage your policies with WinRM (remote PowerShell) and SQLite.

A small console application that generates WDAC policy files from any installer. The generated policy includes the installer itself and it's contents. Most known exe- and msi-based installers are supported.

Script in PowerShell language providing a GUI to drive the native security utility WDAC (Windows Defender Application Control).

Install AMD consumer Ryzen chipset, Radeon graphics, Ryzen AI NPU (XDNA), and the Microsoft inbox Bluetooth PAN driver on Windows Server 2016/2019/2022/2025 by INF ProductType=3 patching, self-signed catalogs, and a WDAC supplemental policy that keeps Secure Boot on. 21-phase pipeline per script, idempotent, MIT-licensed.

YawStar SAC Manager is an advanced and user-friendly Windows utility designed to seamlessly monitor and manage Smart App Control (SAC) on Windows 11. Built with a modern CustomTkinter graphical user interface, this tool allows system administrators and power users to easily toggle and monitor SAC states with administrative efficiency.

Everything i know about app control for business ( WDAC )

Patch for Microsoft's design deficiency of not logging PublisherTBSHash if ACFB policy is enfoiced

Manage App Control for Business Managed Installers through Microsoft Intune using ADMX-backed or embedded configuration, with PowerShell detection and remediation.

ChatGPT dot Windows local-task fix for one verified WDAC cause of DesktopTaskWorkspaceUnavailableError / desktop_task_workspace_unavailable: "The desktop could not prepare a task workspace." PowerShell ConstrainedLanguage diagnostics and guarded repair.

WDAC Policy Analyzer Script - Powershell

Remote Windows security posture triage: Defender, firewall, AppLocker/WDAC, SmartScreen, identity and policy in one read-only dashboard, with fleet scanning, baseline diffing and a self-contained interactive HTML report.

wdac-multi-tool - is an addition to WDAC to help with administrating, maintaining policies and reviewing logs as by default WDAC lacks that! NOTE it is in early stage and im a bad programmer so no hate here! help is welcomed ;)

ThreatLocker-style endpoint control for Windows: WDAC application allowlisting, device control, telemetry and interactive approvals. Single Go binary (server + embedded React console) with a Windows agent over mTLS gRPC.

Puntua drivers de kernel de Windows por capacidades peligrosas para priorizar candidatos BYOVD desconocidos con metricas.

Block AnyDesk, TeamViewer, ScreenConnect, RustDesk and ~50 other remote-access tools that tech-support scammers abuse. Windows App Control signer rules built from LOLRMM, plus an optional ESET web-filter list.