deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-15 06:47:21 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Update use-windows-defender-application-control-with-dynamic-code-security.md

Browse Source
This commit is contained in:
MaratMussabekov 2022-06-10 11:22:24 +05:00 committed by GitHub
parent c533dc1d16
commit 6519ec617a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-dynamic-code-security.md
View File

@ -24,7 +24,7 @@ Historically, Windows Defender Application Control (WDAC) has restricted the set
Security researchers have found that some .NET applications may be used to circumvent those controls by using .NET’s capabilities to load libraries from external sources or generate new code on the fly. Security researchers have found that some .NET applications may be used to circumvent those controls by using .NET’s capabilities to load libraries from external sources or generate new code on the fly.
Beginning with Windows 10, version 1803, or Windows 11, WDAC features a new capability, called *Dynamic Code Security* to verify code loaded by .NET at runtime. Beginning with Windows 10, version 1803, or Windows 11, WDAC features a new capability, called *Dynamic Code Security* to verify code loaded by .NET at runtime.
When the Dynamic Code Security option is enabled, WDAC policy is applied to libraries that .NET loads from external sources. When the Dynamic Code Security option is enabled, WDAC policy is applied to libraries that .NET loads from external sources (any non-local sources, such as Internet or network share).
Additionally, it detects tampering in code generated to disk by .NET and blocks loading code that has been tampered with. Additionally, it detects tampering in code generated to disk by .NET and blocks loading code that has been tampered with.
Dynamic Code Security is not enabled by default because existing policies may not account for externally loaded libraries. Dynamic Code Security is not enabled by default because existing policies may not account for externally loaded libraries.
@ -39,4 +39,4 @@ To enable Dynamic Code Security, add the following option to the `<Rules>` secti
<Rule> <Rule>
<Option>Enabled:Dynamic Code Security</Option> <Option>Enabled:Dynamic Code Security</Option>
</Rule> </Rule>
``` ```