Microsoft AppLocker is an application whitelisting feature built into Windows. Application whitelisting is one of Information Assurance top 10 mitigation strategies.
This project contains scripts and configuration files for aiding administrators in implementing Microsoft AppLocker as outlined in the Application Whitelisting using Microsoft AppLocker paper.
The starter policy provided in this repository is for Windows 7 and Windows 10. A Group Policy Object (GPO) for Windows 10 can be found in the AppLocker folder in the Windows Secure Host Baseline repository.
NSA Information Assurance has a security guide for AppLocker called Application Whitelisting Using Microsoft AppLocker.
See LICENSE.
See DISCLAIMER.