this scripts blocks unsigned exe from execution

ransomewareimmunityproject · Jan 8, 2023 · 1a4c3fb · 1a4c3fb
1 parent e17730e
commit 1a4c3fb
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/block_unsigned_exe.ps1 b/block_unsigned_exe.ps1
@@ -0,0 +1,8 @@
+# Import the AppLocker module
+Import-Module AppLocker
+
+# Create a new AppLocker rule to block execution of .exe files that are not digitally signed
+New-AppLockerPolicyRule -FilePathRuleType Exe -FilePublisherCondition "*" -SignerType "NotSigned" -Action Block
+
+# Enable the AppLocker rules
+Set-AppLockerPolicy -PolicyObject (Get-AppLockerPolicy -Effective) -Enabled $true