windows-itpro-docs/windows/security/threat-protection/windows-defender-application-control/TOC.md

Windows Defender Application Control

Windows Defender Application Control design guide

Understand WDAC policy design decisions

Select the types of rules to create

Plan for WDAC policy management

Document your application control management processes

Create your WDAC planning document

Windows Defender Application Control deployment guide

Types of devices

Use WDAC with the Microsoft Intelligent Security Graph

Use WDAC with a managed installer

###Use WDAC with custom policies

Create an initial default policy

Microsoft recommended block rules

Audit WDAC policies

Merge WDAC policies

Enforce WDAC policies

###Deploy WDAC policies

Use Group Policy

Use SCCM

Use Intune

Use code signing to simplify application control for classic Windows applications

Optional: Use the Device Guard Signing Portal in the Microsoft Store for Business

Optional: Create a code signing cert for WDAC

Deploy catalog files to support WDAC

Manage packaged apps with WDAC

Use a Windows Defender Application Control policy to control specific plug-ins, add-ins, and modules

Use signed policies to protect Windows Defender Application Control against tampering

Signing WDAC policies with SignTool.exe

Disable WDAC policies

Windows Defender Application Control and AppLocker

AppLocker

Administer AppLocker

Maintain AppLocker policies

Edit an AppLocker policy

Test and update an AppLocker policy

Deploy AppLocker policies by using the enforce rules setting

Use the AppLocker Windows PowerShell cmdlets

Use AppLocker and Software Restriction Policies in the same domain

Optimize AppLocker performance

Monitor app usage with AppLocker

Manage packaged apps with AppLocker

Working with AppLocker rules

Create a rule that uses a file hash condition

Create a rule that uses a path condition

Create a rule that uses a publisher condition

Create AppLocker default rules

Add exceptions for an AppLocker rule

Create a rule for packaged apps

Delete an AppLocker rule

Edit AppLocker rules

Enable the DLL rule collection

Enforce AppLocker rules

Run the Automatically Generate Rules wizard

Working with AppLocker policies

Configure the Application Identity service

Configure an AppLocker policy for audit only

Configure an AppLocker policy for enforce rules

Display a custom URL message when users try to run a blocked app

Export an AppLocker policy from a GPO

Export an AppLocker policy to an XML file

Import an AppLocker policy from another computer

Import an AppLocker policy into a GPO

Add rules for packaged apps to existing AppLocker rule-set

Merge AppLocker policies by using Set-ApplockerPolicy

Merge AppLocker policies manually

Refresh an AppLocker policy

Test an AppLocker policy by using Test-AppLockerPolicy

AppLocker design guide

Understand AppLocker policy design decisions

Determine your application control objectives

Create a list of apps deployed to each business group

Document your app list

Select the types of rules to create

Document your AppLocker rules

Determine the Group Policy structure and rule enforcement

Understand AppLocker enforcement settings

Understand AppLocker rules and enforcement setting inheritance in Group Policy

Document the Group Policy structure and AppLocker rule enforcement

Plan for AppLocker policy management

AppLocker deployment guide

Understand the AppLocker policy deployment process

Requirements for Deploying AppLocker Policies

Use Software Restriction Policies and AppLocker policies

Create Your AppLocker policies

Create Your AppLocker rules

Deploy the AppLocker policy into production

Use a reference device to create and maintain AppLocker policies

Determine which apps are digitally signed on a reference device

Configure the AppLocker reference device

AppLocker technical reference

What Is AppLocker?

Requirements to use AppLocker

AppLocker policy use scenarios

How AppLocker works

Understanding AppLocker rule behavior

Understanding AppLocker rule exceptions

Understanding AppLocker rule collections

Understanding AppLocker allow and deny actions on rules

Understanding AppLocker rule condition types

Understanding the publisher rule condition in AppLocker

Understanding the path rule condition in AppLocker

Understanding the file hash rule condition in AppLocker

Understanding AppLocker default rules

Executable rules in AppLocker

Windows Installer rules in AppLocker

Script rules in AppLocker

DLL rules in AppLocker

Packaged apps and packaged app installer rules in AppLocker

AppLocker architecture and components

AppLocker processes and interactions

AppLocker functions

Security considerations for AppLocker

Tools to Use with AppLocker

Using Event Viewer with AppLocker

AppLocker Settings