Update windows-defender-application-control-improvements-in-windows-10-version-1903.md

This commit is contained in:
Justin Hall 2019-05-06 14:29:59 -07:00
parent db7c319f3b
commit a878d79176

View File

@ -28,13 +28,13 @@ Beginning with Windows 10 version 1903, Windows Defender Application Control (WD
- New-CIPolicy parameters - New-CIPolicy parameters
- FilePath: create path rules under path \<path to scan> for anything not user-writeable (at the individual file level) - FilePath: create path rules under path \<path to scan> for anything not user-writeable (at the individual file level)
```console ```powershell
New-CIPolicy -f .\mypolicy.xml -l FilePath -s <path to scan> -u New-CIPolicy -f .\mypolicy.xml -l FilePath -s <path to scan> -u
``` ```
Optionally, add -UserWriteablePaths to ignore user writeability Optionally, add -UserWriteablePaths to ignore user writeability
- FilePathRule: create a rule where filepath string is directly set to value of \<any path string> - FilePathRule: create a rule where filepath string is directly set to value of \<any path string>
```console ```powershell
New-CIPolicyRule -FilePathRule <any path string> New-CIPolicyRule -FilePathRule <any path string>
``` ```
Useful for wildcards like C:\foo\\* Useful for wildcards like C:\foo\\*