deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-19 12:23:37 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Fixed broken bookmark links

Browse Source
This commit is contained in:
Jordan Geurten
2023-02-01 19:51:52 -05:00
parent 52cadc7fcd
commit d1967d6607
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
windows/security/threat-protection/windows-defender-application-control/wdac-wizard-parsing-event-logs.md
View File

@ -31,9 +31,9 @@ ms.technology: itpro-security
As of [version 2.2.0.0](https://webapp-wdac-wizard.azurewebsites.net/archives.html), the WDAC Wizard supports creating WDAC policy rules from the following event log types: As of [version 2.2.0.0](https://webapp-wdac-wizard.azurewebsites.net/archives.html), the WDAC Wizard supports creating WDAC policy rules from the following event log types:
1. [The WDAC event log events on the system](#WDAC-Event-Viewer-Log-Parsing) 1. [The WDAC event log events on the system](#wdac-event-viewer-log-parsing)
2. [Exported .EVTX log files from any system](#WDAC-Event-Log-File-Parsing) 2. [Exported .EVTX log files from any system](#wdac-event-log-file-parsing)
3. [Exported WDAC events from MDE Advanced Hunting WDAC events](#MDE-Advanced-Hunting-WDAC-Event-Parsing) 3. [Exported WDAC events from MDE Advanced Hunting WDAC events](#mde-advanced-hunting-wdac-event-parsing)
## WDAC Event Viewer Log Parsing ## WDAC Event Viewer Log Parsing
@ -50,7 +50,7 @@ The Wizard will parse the relevant audit and block events from the CodeIntegrity
> ![Parse WDAC and AppLocker event log system events](images/wdac-wizard-event-log-system.png) > ![Parse WDAC and AppLocker event log system events](images/wdac-wizard-event-log-system.png)
4. Select the Next button to navigate to the table of software to view the audit and block events and create rules from 4. Select the Next button to navigate to the table of software to view the audit and block events and create rules from
5. [Generate rules from the events](#Creating-Policy-Rules-from-the-Events) 5. [Generate rules from the events](#creating-policy-rules-from-the-events)
## WDAC Event Log File Parsing ## WDAC Event Log File Parsing
@ -67,7 +67,7 @@ The Wizard will parse the relevant audit and block events from the selected log
> ![Parse evtx file WDAC events](images/wdac-wizard-event-log-files.png) > ![Parse evtx file WDAC events](images/wdac-wizard-event-log-files.png)
5. Select the Next button to navigate to the table of software to view the audit and block events and create rules from 5. Select the Next button to navigate to the table of software to view the audit and block events and create rules from
6. [Generate rules from the events](#Creating-Policy-Rules-from-the-Events) 6. [Generate rules from the events](#creating-policy-rules-from-the-events)
## MDE Advanced Hunting WDAC Event Parsing ## MDE Advanced Hunting WDAC Event Parsing
@ -114,7 +114,7 @@ The Wizard will parse the relevant audit and block events from the selected Adva
> ![Parse the Advanced Hunting CSV WDAC event files](images/wdac-wizard-event-log-mde-ah-parsing.png) > ![Parse the Advanced Hunting CSV WDAC event files](images/wdac-wizard-event-log-mde-ah-parsing.png)
7. Select the Next button to navigate to the table of software to view the audit and block events and create rules from 7. Select the Next button to navigate to the table of software to view the audit and block events and create rules from
8. [Generate rules from the events](#Creating-Policy-Rules-from-the-Events) 8. [Generate rules from the events](#creating-policy-rules-from-the-events)
## Creating Policy Rules from the Events ## Creating Policy Rules from the Events