diff --git a/block_debug_exe.ps1 b/block_debug_exe.ps1 new file mode 100644 index 0000000..89b99d5 --- /dev/null +++ b/block_debug_exe.ps1 @@ -0,0 +1,8 @@ +# Import the AppLocker module +Import-Module AppLocker + +# Create a new AppLocker rule to block execution of .exe files compiled in debug mode +New-AppLockerPolicyRule -FilePathRuleType Exe -FilePublisherCondition "*" -DebugInformationType Debug -Action Block + +# Enable the AppLocker rules +Set-AppLockerPolicy -PolicyObject (Get-AppLockerPolicy -Effective) -Enabled $true