Skip to content

AppControl Manager 1.8.8.0
Compare
Choose a tag to compare
@HotCakeX HotCakeX released this 03 Feb 11:23
· 14 commits to main since this release
AppControlManager.v.1.8.8.0
5124358
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's New


Important

How To Install: Copy and Paste this command in a PowerShell window as Admin. (Technical explanation available here)

(irm 'https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/main/Harden-Windows-Security.ps1')+'AppControl'|iex

  • The AppControl Manager now seamlessly integrates Microsoft Defender for Endpoint Advanced Hunting, allowing you to perform queries directly within the app. You can retrieve and analyze hunting results with advanced filtering and sorting options. From there, you can effortlessly create App Control policies and deploy them via Intune—all without ever leaving the app.

    • Technical details: the implemented code is fully compatible with the ahead of time compilation (Native AOT), resulting in high performance source generated code. So whether you are using CSV files from your local system or retrieving the results from the cloud, they are processes very quickly.

    • AppControl Manager employs MediumIL (Medium Integrity Level) when running as an Administrator, ensuring that non-elevated processes cannot access its memory or attach debuggers. Given that the app handles sensitive information—such as Microsoft 365 authentication tokens stored in private variables—this design decision safeguards these tokens from unauthorized, unelevated access or tampering.

    • AppControl Manager leverages MSAL from Microsoft to manage Microsoft 365 authentications. This industry-standard library adheres to best practices for secure authentication token management.

    • Following the Least Privilege Access, the only required permission is ThreatHunting.Read.All

  • Bumped version to 1.8.8.0

  • Improved the toolbar menus in Event logs page and MDE Advanced Hunting page.

  • Adjusted the margin of the titles in the pages to reduce the empty spaces.

  • Updated the documents to cover the new changes and features introduced in this version.

  • Improved the About section in the settings page. The links are now dynamically relocated based on the app window's width.


PR: #580


Note

As mentioned at the top, please refer to this page for installation instructions.


Assets 4
Loading