corpus.blog
54,302 blogs · 4,481,250 posts Claim your blog
Record · corpus.blog/posts/01a0821a-f74f-7216-9ec5-04f4e8ac5b73

Exploring the WDAC Microsoft Recommended Block Rules (Part II): Wfc.exe, Fsi.exe, and FsiAnyCpu.exe

Bohops · published 2 November 2020

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at bohops.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
13
Words captured
893

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
Exploring the WDAC Microsoft Recommended Block Rules: VisualUiaVerifyNative Read at the source ↗
bohops.com
https://twitter.com/tifkin_
twitter.com
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules
docs.microsoft.com
https://github.com/bohops/UltimateWDACBypassList
github.com
https://github.com/bohops/Notes/blob/master/Windows/WDAC-DeviceGuard/Win10_WDAC_DeviceGuard_Testing_Create_ScanPolicy.txt
github.com
https://docs.microsoft.com/en-us/dotnet/framework/windows-workflow-foundation/wfc-exe-workflow-compiler-tool
docs.microsoft.com
https://posts.specterops.io/arbitrary-unsigned-code-execution-vector-in-microsoft-workflow-compiler-exe-3d9294bc5efb
posts.specterops.io
https://github.com/dnSpy/dnSpy
github.com
https://docs.microsoft.com/en-us/dotnet/fsharp/tutorials/fsharp-interactive/
docs.microsoft.com
https://twitter.com/NickTyrer
twitter.com
https://gist.github.com/NickTyrer/51eb8c774a909634fa69b4d06fc79ae1
gist.github.com
https://bohops.com/2020/10/21/exploring-an-assembly-loading-technique-and-detection-mechanism-for-the-gfxdownloadwrapper-exe-lolbin/
bohops.com
https://bohops.com/2019/01/10/com-xsl-transformation-bypassing-microsoft-application-control-solutions-cve-2018-8492/
bohops.com