Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WDACConfig module update v0.2.4 #126

Merged
merged 5 commits into from
Sep 25, 2023
Merged

Conversation

HotCakeX
Copy link
Owner

@HotCakeX HotCakeX commented Sep 25, 2023

What's Changed

  1. When using Deploy-SignedWDACConfig to sign and deploy a WDAC policy, you will only see the prompt asking to add the signed policy to the user configurations, if the policy you are signing and deploying is a base policy.
  2. Improved Temp folder path detection to be more secure and resilient.
  3. Improved User profile directory detection to be more secure.
  4. In New-SupplementalWDACConfig cmdlet, changed the parameter name -FilePathWildCards to PathWildCards to better reflect its purpose.
  5. In New-SupplementalWDACConfig cmdlet, changed the parameter name -WildCardPath to FolderPath to better reflect its purpose.
  6. Added GUI for New-SupplementalWDACConfig -PathWildCards -Path, it automatically adds a * wildcard at the end of the path and you can add extra wildcards to anywhere in the selected folder path too.
  7. Made the generated policy file names and policy names consistent across all WDACConfig module's cmdlets.
  8. When using -Deploy parameter with New-SupplementalWDACConfig cmdlet, if the selected base policy is a Signed policy, you will see an error stating that you should use Deploy-SignedWDACConfig cmdlet to deploy Signed policies.
  9. Removed the manual MDAV scan of the UserConfigurations.json file since Defender already scans all of the files on access.
  10. Relocated some of the parameters of the Set-CommonWDACConfig cmdlet to be easier to work with.
  11. Improved some console output spacing for New-WDACConfig cmdlet.

TL/TR

This update improves the overall experience of the WDACConfig module, makes it easier to work with and implements various new checks to ensure user error is minimal. The goal is to minimize accidental user errors as much as possible by implementing useful and intelligent checks in multiple parts of the module.


@HotCakeX HotCakeX added the Enhancement 💯 New feature or request label Sep 25, 2023
@HotCakeX HotCakeX self-assigned this Sep 25, 2023
@HotCakeX HotCakeX merged commit ea4a56e into main Sep 25, 2023
2 checks passed
@HotCakeX HotCakeX deleted the WDACConfig-module-update-v0.2.4 branch September 25, 2023 16:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Enhancement 💯 New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant