Commit Graph

4 Commits

Author SHA1 Message Date
20e9cdb8e7 Update applications-that-can-bypass-wdac.md to fix MSBuild.exe original filename case
Fixed the filename for FileName=MSBuild.exe to match the Original Filename in the file metadata, rather than just the file name on disk. 

This fixes case sensitive blocklist rules in security products using Original Filenames built off of this XML.
2024-08-19 16:16:08 +09:30
60e1bd1a42 Update applications-that-can-bypass-wdac.md
Sorted <FileRules> list alphabetically & included an RuleID for <Signers /> scenario as well.
2024-02-27 18:56:34 +05:30
904909a5dc Update applications-that-can-bypass-wdac.md
Included dbgsrv.exe to the ruleset that was missing & a known WDAC bypass.
2024-02-08 11:29:19 +05:30
9f04afe6e3 Changed Microsoft Recommended Block list article 2023-08-01 10:18:38 -04:00