Skip to content

AppControl Manager 1.9.3.0
Compare
Choose a tag to compare
@HotCakeX HotCakeX released this 27 Feb 17:40
· 6 commits to main since this release
AppControlManager.v.1.9.3.0
0f31220
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's New


Important

How To Install: Copy and Paste this command in a PowerShell window as Admin. (Technical explanation available here)

(irm 'https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/main/Harden-Windows-Security.ps1')+'AppControl'|iex

  • File path rules now work for non-admin protected folders such as Desktop folder. In the Create Supplemental Policy page, if the scan level is set to File Path or Wildcard File Path, a new rule option called Disabled:Runtime FilePath Rule Protection will be added so that you can use file path rules to allow files in non-admin protected paths to run.

  • Added a deploy toggle button to the Configure policy rule options page. Related discussion

  • File Publisher and Hash rule types created in the XML file will no longer have the file path in the FriendlyName field. This is to make the generated policy more generic for mass deployments. Related discussion

  • Added the ability to create custom pattern-based file-rule-based Supplemental and Deny policies. Related feature request. You can use this feature to create sophisticated allow/deny rules for very dynamic situations.

  • Bumped version to 1.9.3.0

  • Added toggle buttons to the Create AppControl Policy that allows you to create/deploy the base policies without creation/deploying the Microsoft recommended (user-mode) block rules.

  • Improved the resiliency of installed packaged apps list retrieval.

  • In the Configure Policy Rule Options page, when you assign an XML file path to the page using the Sidebar button, its rule options will be automatically retrieved and displayed to you. Previously this would only work when you used the Browse button in the page itself.

  • Some of the info bars in the Create Supplemental Policy page weren't closable at the end of the operation, that's fixed now.

  • All CIP files generated for supplemental and deny policies have the same file name that you select as policy name, making it easier to identify them in the user configurations directory. Previously the CIP files would have the ID (GUID format) which made it hard to recognize which XML or policy they belonged to.

    • Made the same change to the Allow New Apps page at the final step (Step 3) when you create to deploy the supplemental policy.

  • When creating Supplemental or Deny policies, if you choose to deploy them, only the XML policy file will exist in the AppControl Manager directory in Program Files, but if you do not toggle the Deploy button, then the CIP file will also exist in the AppControl Manager directory. This makes it easier for you to use the CIP file on another system. Both the XML and CIP files will have the same name, easy to recognize, and it's the same name you select for the policy.

    • Made the same change to the Allow New Apps page at the final step (Step 3) when you create to deploy the supplemental policy.

  • When user is already inside of the scan results pages for supplemental and deny policies, the total logs/files count is now updated in real time.

  • Added keyboard accelerator: CTRL + C for the pages that host a ListView so you can use that shortcut to copy the selected item(s) to the clipboard.

  • Improved the selection experience in ListViews by making right-click on a row to select that row and then open the context menu.

  • The settings cards in the Settings page are now interactive and can be clicked/touched to perform the main action in the card.

  • Added the delete option to the context menu of the ListViews that require it.

  • Added info bars to the base policy creation page so you can see the live status of policy creation/deployment.

PRs:

  • AppControl-Manager-DownloadLink-Version-Update-Version-1.9.2.0 by @github-actions in #619
  • Bump google/osv-scanner-action from 1.7.1 to 1.9.2 by @dependabot in #621
  • Improved List Views and UI/UX in AppControl Manager by @HotCakeX in #623
  • Adding support for custom file path rule creation by @HotCakeX in #624

Full Changelog: AppControlManager.v.1.9.2.0...AppControlManager.v.1.9.3.0


How to verify the MSIXBundle's authenticity:

gh attestation verify "Path To MSIXBundle" --repo HotCakeX/Harden-Windows-Security --format json

You can install the GitHub CLI from Winget:

winget install --id GitHub.cli

Note

As mentioned at the top, please refer to this page for installation instructions.


Contributors

dependabot and HotCakeX
Assets 9
Loading