4 Commits

Author SHA1 Message Date
Joel Tuckwell
20e9cdb8e7
Update applications-that-can-bypass-wdac.md to fix MSBuild.exe original filename case
Fixed the filename for FileName=MSBuild.exe to match the Original Filename in the file metadata, rather than just the file name on disk. 

This fixes case sensitive blocklist rules in security products using Original Filenames built off of this XML.
2024-08-19 16:16:08 +09:30
Mohammed Tanveer
60e1bd1a42
Update applications-that-can-bypass-wdac.md
Sorted <FileRules> list alphabetically & included an RuleID for <Signers /> scenario as well.
2024-02-27 18:56:34 +05:30
Mohammed Tanveer
904909a5dc
Update applications-that-can-bypass-wdac.md
Included dbgsrv.exe to the ruleset that was missing & a known WDAC bypass.
2024-02-08 11:29:19 +05:30
Vinay Pamnani
9f04afe6e3 Changed Microsoft Recommended Block list article 2023-08-01 10:18:38 -04:00