WDACConfig

This is an advanced PowerShell module for WDAC (Windows Defender Application Control) and automates a lot of tasks.


🟢 Please see the GitHub page for Full details and everything about the module: https://github.com/HotCakeX/Harden-Windows-Security/wiki/WDACConfig


🛡️ Here is the list of parameters the module supports


✔️ Remove-WDACConfig [[-RemoveSignedPolicies]] -PolicyPaths <String[]> [-SignToolPath <String>] -CertCN <String> [-SkipVersionCheck]
   
✔️ Remove-WDACConfig [[-RemovePolicies]] [-PolicyIDs <String[]>] [-PolicyNames <String[]>] [-SkipVersionCheck]

✔️ New-WDACConfig [[-Get_BlockRules]] [-SkipVersionCheck]
   
✔️ New-WDACConfig [[-Get_DriverBlockRules]] [-SkipVersionCheck]
   
✔️ New-WDACConfig [[-Make_AllowMSFT_WithBlockRules]] [-Deployit] [-TestMode] [-RequireEVSigners] [-SkipVersionCheck]
   
✔️ New-WDACConfig [[-Deploy_LatestDriverBlockRules]] [-SkipVersionCheck]
   
✔️ New-WDACConfig [[-Set_AutoUpdateDriverBlockRules]] [-SkipVersionCheck]
   
✔️ New-WDACConfig [[-Prep_MSFTOnlyAudit]] [-LogSize <Int64>] [-SkipVersionCheck]
   
✔️ New-WDACConfig [[-Make_PolicyFromAuditLogs]] [-Deployit] [-TestMode] [-RequireEVSigners] [-Debugmode] [-LogSize <Int64>] [-SkipVersionCheck]
   
✔️ New-WDACConfig [[-Make_LightPolicy]] [-Deployit] [-TestMode] [-RequireEVSigners] [-SkipVersionCheck]
   
✔️ New-WDACConfig [[-Make_SuppPolicy]] -ScanLocation <String> -SuppPolicyName <String> -PolicyPath <String> [-Deployit] [-SkipVersionCheck]

✔️ Edit-WDACConfig [[-AllowNewApps_AuditEvents]] -SuppPolicyName <string> -PolicyPaths <string[]> [-Debugmode] [-LogSize <long>] [-SkipVersionCheck]
   
✔️ Edit-WDACConfig [[-AllowNewApps]] -SuppPolicyName <string> -PolicyPaths <string[]> [-SkipVersionCheck]

✔️ Edit-SignedWDACConfig [[-AllowNewApps_AuditEvents]] -CertPath <String> -SuppPolicyName <String> -PolicyPaths <String[]> [-SignToolPath <String>] -CertCN <String> [-Debugmode] [-LogSize <Int64>] [-SkipVersionCheck]
   
✔️ Edit-SignedWDACConfig [[-AllowNewApps]] -CertPath <String> -SuppPolicyName <String> -PolicyPaths <String[]> [-SignToolPath <String>] -CertCN <String> [-SkipVersionCheck]

✔️ Deploy-SignedWDACConfig -CertPath <String> -PolicyPaths <String[]> [-SignToolPath <String>] -CertCN <String> [-SkipVersionCheck]
   
✔️ Confirm-WDACConfig [[-ListActivePolicies]] [-SkipVersionCheck]
   
✔️ Confirm-WDACConfig [[-VerifyWDACStatus]] [-SkipVersionCheck]


To get help and syntax on PowerShell console, type:
"Get-Command -Module WDACConfig"
"Get-Help Confirm-WDACConfig"
"Get-Help Deploy-SignedWDACConfig"
"Get-Help Edit-SignedWDACConfig"
"Get-Help Edit-WDACConfig"
"Get-Help New-WDACConfig"
"Get-Help Remove-WDACConfig"