This scripts blocks the exe compiled in debug mode

ransomewareimmunityproject · Jan 8, 2023 · e17730e · e17730e
1 parent 911c43f
commit e17730e
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/block_debug_exe.ps1 b/block_debug_exe.ps1
@@ -0,0 +1,8 @@
+# Import the AppLocker module
+Import-Module AppLocker
+
+# Create a new AppLocker rule to block execution of .exe files compiled in debug mode
+New-AppLockerPolicyRule -FilePathRuleType Exe -FilePublisherCondition "*" -DebugInformationType Debug -Action Block
+
+# Enable the AppLocker rules
+Set-AppLockerPolicy -PolicyObject (Get-AppLockerPolicy -Effective) -Enabled $true