domains / families / security / implementing-application-whitelisting-with-applocker

implementing-application-whitelisting-with-applocker

separate

'Implements application whitelisting using Windows AppLocker to restrict

When to use

• Implementing application control to prevent unauthorized software execution on Windows endpoints
• Meeting compliance requirements (PCI DSS 6.4.3, NIST 800-53 CM-7, ACSC Essential Eight)
• Blocking common attack vectors: living-off-the-land binaries (LOLBins), script-based attacks, unauthorized admin tools
• Restricting software installation in kiosk, POS, or high-security environments

When not to use

• macOS/Linux application control
• Enterprise-grade WDAC (Windows Defender Application Control) deployments

Skill page

Source