deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-18 20:03:40 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Fixed broken bookmark links

Browse Source
This commit is contained in:
Jordan Geurten
2023-02-01 19:51:52 -05:00
parent 52cadc7fcd
commit d1967d6607
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
windows/security/threat-protection/windows-defender-application-control/wdac-wizard-parsing-event-logs.md
View File

@ -31,9 +31,9 @@ ms.technology: itpro-security
As of [version 2.2.0.0](https://webapp-wdac-wizard.azurewebsites.net/archives.html), the WDAC Wizard supports creating WDAC policy rules from the following event log types:
1. [The WDAC event log events on the system](#WDAC-Event-Viewer-Log-Parsing)
2. [Exported .EVTX log files from any system](#WDAC-Event-Log-File-Parsing)
3. [Exported WDAC events from MDE Advanced Hunting WDAC events](#MDE-Advanced-Hunting-WDAC-Event-Parsing)
1. [The WDAC event log events on the system](#wdac-event-viewer-log-parsing)
2. [Exported .EVTX log files from any system](#wdac-event-log-file-parsing)
3. [Exported WDAC events from MDE Advanced Hunting WDAC events](#mde-advanced-hunting-wdac-event-parsing)
## WDAC Event Viewer Log Parsing
@ -50,7 +50,7 @@ The Wizard will parse the relevant audit and block events from the CodeIntegrity
> ![Parse WDAC and AppLocker event log system events](images/wdac-wizard-event-log-system.png)
4. Select the Next button to navigate to the table of software to view the audit and block events and create rules from
5. [Generate rules from the events](#Creating-Policy-Rules-from-the-Events)
5. [Generate rules from the events](#creating-policy-rules-from-the-events)
## WDAC Event Log File Parsing
@ -67,7 +67,7 @@ The Wizard will parse the relevant audit and block events from the selected log
> ![Parse evtx file WDAC events](images/wdac-wizard-event-log-files.png)
5. Select the Next button to navigate to the table of software to view the audit and block events and create rules from
6. [Generate rules from the events](#Creating-Policy-Rules-from-the-Events)
6. [Generate rules from the events](#creating-policy-rules-from-the-events)
## MDE Advanced Hunting WDAC Event Parsing
@ -114,7 +114,7 @@ The Wizard will parse the relevant audit and block events from the selected Adva
> ![Parse the Advanced Hunting CSV WDAC event files](images/wdac-wizard-event-log-mde-ah-parsing.png)
7. Select the Next button to navigate to the table of software to view the audit and block events and create rules from
8. [Generate rules from the events](#Creating-Policy-Rules-from-the-Events)
8. [Generate rules from the events](#creating-policy-rules-from-the-events)
## Creating Policy Rules from the Events