deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-14 14:27:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Raise acro score

Browse Source 
sync PR: https://github.com/MicrosoftDocs/windows-docs-pr/pull/5480
This commit is contained in:
Diana Hanson 2021-08-09 11:56:00 -06:00 committed by GitHub
parent 4da51ad0ed
commit f15dc57cec
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 20 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

40
windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md
View File

@ -91,26 +91,26 @@ The WDAC policy rule-option values can be derived from the "Options" field in th
| Bit Address | Policy Rule Option | | Bit Address | Policy Rule Option |
|-------|------| |-------|------|
| 2 | Enabled:UMCI | | 2 | `Enabled:UMCI` |
| 3 | Enabled:Boot Menu Protection | | 3 | `Enabled:Boot Menu Protection` |
| 4 | Enabled:Intelligent Security Graph Authorization | | 4 | `Enabled:Intelligent Security Graph Authorization` |
| 5 | Enabled:Invalidate EAs on Reboot | | 5 | `Enabled:Invalidate EAs on Reboot` |
| 7 | Required:WHQL | | 7 | `Required:WHQL` |
| 10 | Enabled:Allow Supplemental Policies | | 10 | `Enabled:Allow Supplemental Policies` |
| 11 | Disabled:Runtime FilePath Rule Protection | | 11 | `Disabled:Runtime FilePath Rule Protection` |
| 13 | Enabled:Revoked Expired As Unsigned | | 13 | `Enabled:Revoked Expired As Unsigned` |
| 16 | Enabled:Audit Mode (Default) | | 16 | `Enabled:Audit Mode (Default)` |
| 17 | Disabled:Flight Signing | | 17 | `Disabled:Flight Signing` |
| 18 | Enabled:Inherit Default Policy | | 18 | `Enabled:Inherit Default Policy` |
| 19 | Enabled:Unsigned System Integrity Policy (Default) | | 19 | `Enabled:Unsigned System Integrity Policy (Default)` |
| 20 | Enabled:Dynamic Code Security | | 20 | `Enabled:Dynamic Code Security` |
| 21 | Required:EV Signers | | 21 | `Required:EV Signers` |
| 22 | Enabled:Boot Audit on Failure | | 22 | `Enabled:Boot Audit on Failure` |
| 23 | Enabled:Advanced Boot Options Menu | | 23 | `Enabled:Advanced Boot Options Menu` |
| 24 | Disabled:Script Enforcement | | 24 | `Disabled:Script Enforcement` |
| 25 | Required:Enforce Store Applications | | 25 | `Required:Enforce Store Applications` |
| 27 | Enabled:Managed Installer | | 27 | `Enabled:Managed Installer` |
| 28 | Enabled:Update Policy No Reboot | | 28 | `Enabled:Update Policy No Reboot` |
## Appendix ## Appendix
A list of other relevant event IDs and their corresponding description. A list of other relevant event IDs and their corresponding description.