applocker

5 tools and resources

NEW

SharpAppLocker provides a C# adaptation of the Get-AppLockerPolicy cmdlet for managing application control policies.

A blog post discussing INF-SCT fetch and execute techniques for bypass, evasion, and persistence

Utilizing Alternate Data Streams (ADS) to bypass AppLocker default policies by loading DLL/CPL binaries.

Repository documenting common techniques to bypass AppLocker with verified, unverified, and generic bypasses.

A guide to implementing Microsoft AppLocker for application whitelisting