deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-15 23:07:23 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Removed dangling from

Browse Source
This commit is contained in:
Jordan Geurten 2023-02-06 19:02:23 -05:00
parent 0e3338daa0
commit d84e00e08f
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
windows/security/threat-protection/windows-defender-application-control/wdac-wizard-parsing-event-logs.md
View File

@ -49,7 +49,7 @@ To create rules from the WDAC event logs on the system:
> [!div class="mx-imgBorder"] > [!div class="mx-imgBorder"]
> ![Parse WDAC and AppLocker event log system events](images/wdac-wizard-event-log-system.png) > ![Parse WDAC and AppLocker event log system events](images/wdac-wizard-event-log-system.png)
4. Select the Next button to view the audit and block events and create rules from. 4. Select the Next button to view the audit and block events and create rules.
5. [Generate rules from the events](#creating-policy-rules-from-the-events). 5. [Generate rules from the events](#creating-policy-rules-from-the-events).
## WDAC Event Log File Parsing ## WDAC Event Log File Parsing
@ -66,7 +66,7 @@ To create rules from the WDAC `.EVTX` event logs files on the system:
> [!div class="mx-imgBorder"] > [!div class="mx-imgBorder"]
> ![Parse evtx file WDAC events](images/wdac-wizard-event-log-files.png) > ![Parse evtx file WDAC events](images/wdac-wizard-event-log-files.png)
5. Select the Next button to view the audit and block events and create rules from. 5. Select the Next button to view the audit and block events and create rules.
6. [Generate rules from the events](#creating-policy-rules-from-the-events). 6. [Generate rules from the events](#creating-policy-rules-from-the-events).
## MDE Advanced Hunting WDAC Event Parsing ## MDE Advanced Hunting WDAC Event Parsing
@ -113,7 +113,7 @@ To create rules from the WDAC events in [MDE Advanced Hunting](querying-applicat
> [!div class="mx-imgBorder"] > [!div class="mx-imgBorder"]
> ![Parse the Advanced Hunting CSV WDAC event files](images/wdac-wizard-event-log-mde-ah-parsing.png) > ![Parse the Advanced Hunting CSV WDAC event files](images/wdac-wizard-event-log-mde-ah-parsing.png)
7. Select the Next button to view the audit and block events and create rules from. 7. Select the Next button to view the audit and block events and create rules.
8. [Generate rules from the events](#creating-policy-rules-from-the-events). 8. [Generate rules from the events](#creating-policy-rules-from-the-events).
## Creating Policy Rules from the Events ## Creating Policy Rules from the Events