Event banner
Event details
What is the best way to create and maintain a 'whitelist only' Windows Defender App Control (WDAC) policy? We would prefer a 'pipeline' triggered by approval of each patch or new software. By 'pipeline', we want a way to maintain the system that doesn't require the manual generation and or maintaining of XML documents. We need a more feasible way to do the daily ongoing adjustments to the system. Microsoft's WDAC wizard is a start, but it does not seem to support this type of feature, nor does the PowerShell module it relies on.