From 0478c9e05670e449f926ba55cea7944da4a22e82 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Tue, 14 Sep 2021 16:16:32 -0700 Subject: [PATCH] Updated the recommended blocklist to block un-enlightened versions of cscript/wscript with versions less than 10.0.0.0 --- .../microsoft-recommended-block-rules.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md b/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md index 008d041e97..0365837d1b 100644 --- a/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md +++ b/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md @@ -40,6 +40,7 @@ Unless your use scenarios explicitly require them, Microsoft recommends that you - bash.exe - bginfo.exe1 - cdb.exe +- cscript.exe - csi.exe - dbghost.exe - dbgsvc.exe @@ -69,6 +70,7 @@ Unless your use scenarios explicitly require them, Microsoft recommends that you - wfc.exe - windbg.exe - wmic.exe +- wscript.exe - wsl.exe - wslconfig.exe - wslhost.exe @@ -149,7 +151,7 @@ Select the correct version of each .dll for the Windows release you plan to supp - + @@ -179,7 +181,7 @@ Select the correct version of each .dll for the Windows release you plan to supp - +