Skip to content

IT Dev Lab

Learnings and musings of a Microsoft Identity & Security consultant

IT Dev Lab

Learnings and musings of a Microsoft Identity & Security consultant

  • Home
  • Post Series
    • WDAC Wednesday
  • Links library
  • About
    • Home
    • Andrew
WDAC

WDAC Wednesday: Manual software installs

Andrew 25 November 2025 0 Comments

Happy WDAC Wednesday! As we’ve covered previously Application Control for Business (ACFB) is a very powerful and effective solution for combating malware within your environment. ACFB achieves this by using…

WDAC

WDAC Wednesday: Plan to fail, the importance of rollback testing

Andrew 18 November 2025 0 Comments

Happy WDAC Wednesday! Application Control for Business (ACFB) is a very powerful solution that enhances security by greatly reducing the risk of malware being able to infect an organisation, however…

WDAC

WDAC Wednesday: Application Control and the Essential Eight

Andrew 11 November 2025 0 Comments

Happy WDAC Wednesday! As we’ve covered previously in the series Application Control for Business (ACFB) is highly effective at blocking malware as part of a defense in depth security strategy.…

WDAC

WDAC Wednesday: AppLocker vs Application Control for Business

Andrew 4 November 2025 0 Comments

Happy WDAC Wednesday! In the first two posts we covered the benefits provided by Application Control for Business (ACFB) enhances malware prevention beyond AV/EDR solutions, and outlined a high-level implementation…

WDAC

WDAC Wedesday: Audit mode advantage

Andrew 28 October 2025 0 Comments

Happy WDAC Wednesday! Application control solutions are very powerful, they are like a gate keeper, and determine what installed applications are allowed to run. Applying tighter controls on endpoints, using…

WDAC

WDAC Wedesday: Why anti-virus and EDR isn’t enough

Andrew 21 October 2025 0 Comments

Happy WDAC Wednesday! Welcome to a new series with the aim of detailing and demistifying Microsoft’s Application Control for Business (ACFB), a powerful solution used to allow or block applications…

Microsoft Entra MIM2016

Looking to migrate from MIM to Microsoft Entra?

Andrew 9 March 2024 0 Comments

If you’re an organisation utilising Microsoft Identity Manager (MIM) Microsoft have recently released a Microsoft Learn article that maps capabilities of MIM to those in Microsoft Entra, and is a…

Sentinel WDAC

January 2024 WDAC Advanced Hunting changes

Andrew 12 December 2023 0 Comments

Microsoft today published an update advisory for Windows Defender Application Control (WDAC) Advanced Hunting changes that could have an impact if you have any hunting rules or dashboards in place.…

WDAC

Creating a policy with the WDAC Wizard

Andrew 4 December 2023 0 Comments

The goal of this post is to step through the process of using the WDAC Wizard to create a sample WDAC policy and deploy it to a test Windows 10…

WDAC

Application control with Microsoft WDAC

Andrew 20 November 2023 0 Comments

This blog post will be the first (of many) in a series relating to Microsoft WDAC and how to understand, implement and manage it. In the current cyber security landscape…

Posts pagination

1 2 … 4

Next Page »

You Missed

WDAC

WDAC Wednesday: Manual software installs

WDAC

WDAC Wednesday: Plan to fail, the importance of rollback testing

WDAC

WDAC Wednesday: Application Control and the Essential Eight

WDAC

WDAC Wednesday: AppLocker vs Application Control for Business

IT Dev Lab

Learnings and musings of a Microsoft Identity & Security consultant