Advice Request Is WDAC policy created online reliable?

[Parkinsond]

Generate Windows Defender Application Control (WDAC) policies

 

[Bot]

Generate Windows Defender Application Control (WDAC) policies

Thanks for sharing that link, @Parkinsond! The WDAC Policy Generator looks like a handy tool for creating Windows Defender Application Control policies. For those unfamiliar, WDAC helps enforce which apps can run on Windows systems, which is great for security hardening (e.g., blocking unauthorized software in enterprise or high-security setups).

If you're using it or have questions about implementing WDAC for malware prevention, feel free to elaborate—happy to discuss tips or best practices here on MalwareTips!

 

[oldschool]

Why not use something like this? It's from a developer here on the forum. She includes all documentation for her scripts and offers a GUI.

Thread 'Harden Windows Security | Only with official documented methods | Always up to date'

Jan 31, 2023

Please make sure you read everything (preferably on GitHub because I had to remove so much formatting due to forum rules) so you will understand what each security measure means, why it's there and what to expect. everything is properly documented. also pay attention to the Trust section to see how you can 100% trust the GitHub repository and use the same tactics to verify the trustworthiness of any other similar thing you come across. Feel free to copy and fork the repository, actually I recommend to do it in the Trust section.


If you have any technical feedback...

• SpyNetGirl
• Replies: 76
• Forum: Other security for Windows, Mac, Linux

• 
• 
• 

 

[Parkinsond]

Why not use something like this? It's from a developer here on the forum. She includes all documentation for her scripts and offers a GUI.

Thread 'Harden Windows Security | Only with official documented methods | Always up to date'

Jan 31, 2023

Please make sure you read everything (preferably on GitHub because I had to remove so much formatting due to forum rules) so you will understand what each security measure means, why it's there and what to expect. everything is properly documented. also pay attention to the Trust section to see how you can 100% trust the GitHub repository and use the same tactics to verify the trustworthiness of any other similar thing you come across. Feel free to copy and fork the repository, actually I recommend to do it in the Trust section.


If you have any technical feedback...

• SpyNetGirl
• Replies: 76
• Forum: Other security for Windows, Mac, Linux

• 
• 
• 

First, the online method is easier; no need to install extra program.
Second, after reading how it works, I have found it more complicated than a more simple (and portable) tool, such as WHHL.
Third, and the most important, I have no MS store to install

 

[EASTER]

You can install the GitHub CLI from Winget:

winget install --id GitHub.cli

 

[Parkinsond]

You can install the GitHub CLI from Winget:

winget install --id GitHub.cli

Command-line interface! I prefer dealing with GUI; never used Winget before.

 

[Victor M]

@Parkinsond , If you went to her site : AppControl Manager you will see a section "Use GitHub Packages". There is a line of Powershell you can copy and paste and it will install her app. Very simple.

 

[EASTER]

Install WinGet with one command​

• Works on Windows 10 (1809 or newer, LTSC included), Windows 11, Server 2019/2022
• Always gets the latest version of winget
• Open Windows PowerShell as administrator
• Paste this command:

GitHub - gerardog/winget-installer: Install winget tool using PowerShell! Prerequisites automatically installed. Works on Windows 10/11 and Server 2019/2022.

 

[Parkinsond]

@Parkinsond , If you went to her site : AppControl Manager you will see a section "Use GitHub Packages". There is a line of Powershell you can copy and paste and it will install her app. Very simple.

This one?

winget install --id 9PNG1JDDTGP8 --exact --accept-package-agreements --accept-source-agreements --force --source msstore

 

[Victor M]

No This one::

(irm 'https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/main/Harden-Windows-Security.ps1')+'AppControl'|iex

 

[Parkinsond]

Installed WDAC wizard, but it fails to create the policy if I select to include MS recommended block rules.
As a workaround, I created the policy online, then choosed policy editor of the wizard; the created policy included the block rules but not ISG, so I selected without ticking the block rules and created the appropriate cip file.

 

[Victor M]

@Parkinsond So Spynetgirl's app didn't work for you ?

 

[Zero Knowledge]

WDAC Lockdown - Automates Windows Defender Application Control with one click for powerful lockdown protection.

I would think this would be first call with WDAC? I think dan's tools are very good.

 

[rashmi]

So Spynetgirl's app didn't work for you ?

Her apps work well, but they are not as simple as @Andy Ful's or @danb's.

 

[EASTER]

Her apps work well, but they are not as simple as @Andy Ful's or @danb's.

Might not be until a user gets acquainted with it. It's pretty comprehensive enough (manually granular) that i just installed it myself. Thanks @Victor M

 

[ForgottenSeer 114717]

Generate Windows Defender Application Control (WDAC) policies

SpyNetGirl is an extremely militant pro-Microsoft Security advocate with a mind that is entirely closed-off from any other options or compatibility with much of anything. Be warned. If you attempt to use her utilities, the procedures to implement are long and tedious. They're also not compatible with quite a few things.

The best way to contact SpyNetGirl is via GitHub and start a conversation for her. But again, if you have 3rd party software installed that she does not approve of, then don't expect a good experience interacting with her.

SpyNetGirl

All Cyber security posts ranging from Application Control for Business to GitHub repository and everything in between.

spynetgirl.github.io

GitHub - HotCakeX/Harden-Windows-Security: Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Ente

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Pers...

github.com

While actively developed or maintained, SpyNetGirl lasted here at MT no more than a 45 days because she could not cope with any views other than her own. Also she will shut you down if you like Fortnite, you don't worship LGBTQ+, and think for yourself about Windows security and it does align with her world view. I am not exaggerating or stating what SpyNetGirl already posts across at least ten (10) different platforms. So please, don't hate on me. I'm not bashing the sheheit.

I have met someone virtually who is as difficult to get along with as SpyNetGirl.

 

[Parkinsond]

@Parkinsond So Spynetgirl's app didn't work for you ?

I have not tried yet.

 

[Parkinsond]

WDAC Lockdown - Automates Windows Defender Application Control with one click for powerful lockdown protection.

I would think this would be first call with WDAC? I think dan's tools are very good.

I prefer portable apps such as WHHL or an online policy generator to avoid installing more programs.

 

[Parkinsond]

Her apps work well, but they are not as simple as @Andy Ful's or @danb's.

I always seek simplicity and usability; I am not a high-risk user to choose security over both of them.

 

[Victor M]

I have not tried yet.

Go to her site again, and find that code line. I think the copy and paste didnt work right. The pasted line is missing some chars at the end.