AppLocker can be used on Windows machines to control the execution of executables, dlls, scripts, and more. Here, we very often speak about whitelisting rules (specifically defining what can be executed) and blacklisting rules (preventing only specific known executions). AppLocker itself provides Allow and Deny rules, which fit perfectly with the previously described whitelisting and blacklisting rules.
To now force the whitelisting of our scripts, the following possibilities are available:
We create a simple script rule, configured in Allow-Mode, and are provided with three choices:
- Publisher: Sign all your scripts with a certificate ...
