Thx. Had a discussion with my costumer, and they are leaning towards starting fresh with App Control for Business. What would best approach for a base policy in audit mode, without managed installer.

As the customer has many legacy apps and system, that are un-signed etc., i'm missing some guides how I should configure a baseline policy - for maximum insights and less effort when policy needs to aktivation. Assuming many files etc. will need to be allowed manually in policy.