Reducing attack surface with Application Control and Managed Installers.
This post will explain the basics of how a Windows Defender Application Control managed installer works.
Recent Posts
Logging in a cloud-world - Part 3 (Intune/Autopilot)
Let’s implement the functionality we discussed in Part 1 and Part 2 in Autopilot/Intune.
Making the case for reducing (ConfigMgr) attack surface by staying current
Servicing your Endpoint Manager Configuration Manager environment isn’t only about getting those shiny new features, it’s about security too. A case in point.
Logging in a cloud-world - Part 2
Copying log files through azure was great start, now let’s try and make it more secure !
Logging in a cloud-world - Part 1
Configmgr provides a wealth of information in logfiles, but they are only useful if you have access to them …
Attack surface reduction
The attack surface reduction principle should be top of mind for IT admins.
Powershell App Deployment Toolkit - GUI (Updated version 1.4)
GUI for creating Intune & SCCM applications using the Powershell App Deployment Toolkit, including creating Software ID Tags for easier License Managemen...
Defending the (SCCM) Castle
With great power comes great responsibility !
SCCM Healthcheck
A deep dive into your SCCM environment
Intune - Security baselines (Preview)
The modern alternative for security baseline GPO’s