Forum Discussion
Microsoft recommended block rules for DLLs
To be sure... are you using device guard or applocker... as that error that did not meet the Windows signing level requirements sounds like device guard (code integrity) And by the looks of it... did you configured some additional logging
Enable Code Integrity Event Logging and System Auditing - Windows drivers | Microsoft Learn
Code integrity logs are enabled by default.
- HotCakeXFeb 28, 2023MVP
Hi, the link you mentioned belongs to Applocker.
Microsoft recommended block rules are here:
https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rulesand I searched for the DLL file you mentioned and couldn't find it in there.
When using a 3rd party AV, I suggest turning on EDR in Microsoft Defender in Windows and set it to block mode:
More info about WDAC and its deployment methods: (you don't need Applocker when using WDAC as WDAC is superior and provides more protection)
https://github.com/HotCakeX/Harden-Windows-Security/wiki/Introduction