Skip to content

IT Dev Lab

Learnings and musings of a Microsoft Identity & Security consultant

IT Dev Lab

Learnings and musings of a Microsoft Identity & Security consultant

  • Home
  • Post Series
    • WDAC Wednesday
  • Links library
  • About
    • Home
    • 2022
    • May
Uncategorized WDAC

Confirm what WDAC policies are present on a device

Andrew 18 May 2022 0 Comments

Windows Defender Application Control (WDAC) is an application control system integrated into Windows 10/11 and is used within Enterprise to whitelist trusted applications, allowing them to run, and blocking either…

KQL Today I Learned

#TIL KQL parse_path() function

Andrew 5 May 2022 0 Comments

Working with Sentinel and Log Analytics is nearly a daily task for me of late, and working with WDAC of late interrogating file paths was something I was finding very…

Microsoft 365

Microsoft 365 dkim=fail (no key for signature)

Andrew 3 May 2022 0 Comments

Recently I was working on a migration project moving a number of domains from a 3rd party mail hygiene solution to Defender for Office 365 and as part of the…

IT Dev Lab GitHub

Recent Posts

  • WDAC Wednesday: Manual software installs
  • WDAC Wednesday: Plan to fail, the importance of rollback testing
  • WDAC Wednesday: Application Control and the Essential Eight
  • WDAC Wednesday: AppLocker vs Application Control for Business
  • WDAC Wedesday: Audit mode advantage

Categories

  • Azure AD
  • Dynamics 365
  • Exchange Online
  • Home network
  • Intune
  • KQL
  • Logic Apps
  • Microsoft 365
  • Microsoft Entra
  • MIM2016
  • PowerShell
  • Sentinel
  • Today I Learned
  • Uncategorized
  • WDAC
  • Windows

You Missed

WDAC

WDAC Wednesday: Manual software installs

WDAC

WDAC Wednesday: Plan to fail, the importance of rollback testing

WDAC

WDAC Wednesday: Application Control and the Essential Eight

WDAC

WDAC Wednesday: AppLocker vs Application Control for Business

IT Dev Lab

Learnings and musings of a Microsoft Identity & Security consultant