Reply to thread

Message

<blockquote data-quote="ForgottenSeer 95367" data-source="post: 1005159">Would you please be a bit more clear or detailed in sharing infos?Which policy files are you talking about? (Are you referring to the raw XML WDAC policy file or after it has been converted to a WDAC policy binary using)?:[ICODE]ConvertFrom-CIPolicy&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; [-XmlFilePath] &lt;String&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; [-BinaryFilePath] &lt;String&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; [&lt;CommonParameters&gt;][/ICODE]The WDAC policy needs to be converted to a binary file, and that is the operational policy file that is &quot;dropped&quot; into CodeIntegrity per the official WDAC documentation.Is there a different way using different policy files? (outside the official documentation?) The way you phrase your previous reply, in English it can be taken as meaning there are multiple ways to activate the WDAC policy on an endpoint using a WDAC policy file other than the binary.</blockquote>

[QUOTE="ForgottenSeer 95367, post: 1005159"] Would you please be a bit more clear or detailed in sharing infos? Which policy files are you talking about? (Are you referring to the raw XML WDAC policy file or after it has been converted to a WDAC policy binary using)?: [ICODE] ConvertFrom-CIPolicy [-XmlFilePath] <String> [-BinaryFilePath] <String> [<CommonParameters>] [/ICODE] The WDAC policy needs to be converted to a binary file, and that is the operational policy file that is "dropped" into CodeIntegrity per the official WDAC documentation. Is there a different way using different policy files? (outside the official documentation?) The way you phrase your previous reply, in English it can be taken as meaning there are multiple ways to activate the WDAC policy on an endpoint using a WDAC policy file other than the binary. [/QUOTE]

Verification