WDACConfig

This is an advanced PowerShell module for WDAC (Windows Defender Application Control) and automates a lot of tasks.


🟢 Please see the GitHub page for Full details and everything about the module: https://github.com/HotCakeX/Harden-Windows-Security/wiki/WDACConfig


🛡️ Here is the list of parameters the module supports


✔️ New-WDACConfig [[-Get_BlockRules]]

✔️ New-WDACConfig [[-Get_DriverBlockRules]]

✔️ New-WDACConfig [[-Make_AllowMSFT_WithBlockRules]] [-Deployit] [-TestMode] [-RequireEVSigners]

✔️ New-WDACConfig [[-Deploy_LatestDriverBlockRules]]

✔️ New-WDACConfig [[-Set_AutoUpdateDriverBlockRules]]

✔️ New-WDACConfig [[-Prep_MSFTOnlyAudit]] [-LogSize <Int64>]

✔️ New-WDACConfig [[-Make_PolicyFromAuditLogs]] [-Deployit] [-TestMode] [-RequireEVSigners] [-Debugmode] [-LogSize <Int64>]

✔️ New-WDACConfig [[-Make_LightPolicy]] [-Deployit] [-TestMode] [-RequireEVSigners]

✔️ New-WDACConfig [[-Make_SuppPolicy]] -ScanLocation <String> -SuppPolicyName <String> -PolicyPath <String> [-Deployit]

✔️ Remove-WDACConfig [[-RemoveSignedPolicies]] -PolicyPaths <String[]> [-SignToolPath <String>] -CertCN <String>

✔️ Remove-WDACConfig [[-RemovePolicies]] [-PolicyIDs <String[]>] [-PolicyNames <String[]>]

✔️ Edit-WDACConfig [[-AllowNewApps_AuditEvents]] -SuppPolicyName <string> -PolicyPaths <string[]> [-Debugmode] [-LogSize <long>]

✔️ Edit-WDACConfig [[-AllowNewApps]] -SuppPolicyName <string> -PolicyPaths <string[]>

✔️ Edit-WDACConfig [[-Merge_SupplementalPolicies]] -SuppPolicyName <String> -PolicyPaths <String[]> -SuppPolicyPaths <String[]>

✔️ Edit-SignedWDACConfig [[-AllowNewApps_AuditEvents]] -CertPath <String> -SuppPolicyName <String> -PolicyPaths <String[]> [-SignToolPath <String>] -CertCN <String> [-Debugmode] [-LogSize <Int64>]
   
✔️ Edit-SignedWDACConfig [[-AllowNewApps]] -CertPath <String> -SuppPolicyName <String> -PolicyPaths <String[]> [-SignToolPath <String>] -CertCN <String>
   
✔️ Edit-SignedWDACConfig [[-Merge_SupplementalPolicies]] -CertPath <String> -SuppPolicyName <String> -PolicyPaths <String[]> [-SignToolPath <String>] -CertCN <String> -SuppPolicyPaths <String[]>

✔️ Deploy-SignedWDACConfig -CertPath <String> -PolicyPaths <String[]> [-SignToolPath <String>] -CertCN <String>

✔️ Confirm-WDACConfig [[-ListActivePolicies]]

✔️ Confirm-WDACConfig [[-VerifyWDACStatus]]

✔️ Confirm-WDACConfig [[-CheckSmartAppControlStatus]]


To get help and syntax on PowerShell console, type:
"Get-Command -Module WDACConfig"
"Get-Help Confirm-WDACConfig"
"Get-Help Deploy-SignedWDACConfig"
"Get-Help Edit-SignedWDACConfig"
"Get-Help Edit-WDACConfig"
"Get-Help New-WDACConfig"
"Get-Help Remove-WDACConfig"