WDACConfig Basics

[ghost]

This video was crazy! You are making me want to learn this stuff! Is there away you can ELI5 on the best novice way to set this up for the most security? Or is this really for advanced users?

Thanks!

[HotCakeX]

Thank you, I'm glad you're interested in knowing more about it ^^

It's true that the content in the repository are made in a way that the reader is expected to know a few things beforehand. Here is brief introduction to WDAC:

Windows Defender Application Control is a feature that helps you protect your computer from harmful software. It lets you decide which programs and files are allowed to run on your computer, and which ones are not. It does this by checking the identity and reputation of the software before it runs.

The identity of the software is like its name and address. It tells you who made the software and where it came from. The identity of the software is usually verified by a digital signature, which is like a stamp of approval from a trusted authority. The digital signature proves that the software is authentic and has not been tampered with.

The reputation of the software is like its rating and reviews. It tells you how trustworthy and reliable the software is. The reputation of the software is determined by Microsoft’s Intelligent Security Graph, which is a system that collects and analyzes data from millions of devices and sources around the world.

Windows Defender Application Control uses these two factors to create rules that allow or block software from running on your computer. You can create your own rules or use the default rules that are provided by Microsoft. You can also use different rules for different types of software, such as drivers, applications, scripts, or installers.

When you use Windows Defender Application Control, you can make your computer super secure and prevent malware from infecting your system. Malware is a type of software that can harm your computer or steal your information. Malware can come from various sources, such as untrusted websites, email attachments, or removable drives. Windows Defender Application Control can stop malware from running by checking its identity and reputation before it starts.

You can create WDAC policies manually or use Smart App Control that automates the entire process of creation, deployment and maintenance.

What is Smart App Control?

Application Control for Windows

Smart App Control

High level introduction to WDAC

This was a generalized answer, I can answer better if you have more specific questions. hope that helps :)

[ghost]

Thank you! That was very helpful. Do you recommend Smart App Control for someone who is new to this?

[HotCakeX]

You're welcome! Yes, definitely, I use it myself too

[ghost]

Okay thank you!