Violet Hansen

Bug (ConfigCI module) when creating WDAC policy rule with PFN level in PowerShell 7.4

1

### Prerequisites - [X] Write a descriptive title. - [X] Make sure you are able to repro it on the [latest released version](https://github.com/PowerShell/PowerShell/releases) - [X] Search the existing issues. -...

### Prerequisites - [X] Write a descriptive title. - [X] Make sure you are able to repro it on the [latest released version](https://github.com/PowerShell/PowerShell/releases) - [X] Search the existing issues. -...

Thanks 🙏

2

Just wanted to thank whoever did this and hope they're safe Would love to see similar leaks from russian apts too 😊

The EnableConvertWarnToBlock Parameter is Missing from the Set-MpPreference Documentation

4

In Windows 11 stable build 22621.2134, the `Set-MpPreference` cmdlet has a new parameter called `EnableConvertWarnToBlock` but it's undocumented. --- #### Document Details ⚠ *Do not edit this section. It is...

Upcoming Windows change: 🚀 Citool shows which policies are Signed

1

Currently only available in Windows insider builds in Dev channel and above, Citool has many new features and capabilities, including showing whether a deployed policy is signed or not. When...

Upcoming Windows change: 🚀 SMB signing requirement being applied by default

2

https://blogs.windows.com/windows-insider/2023/06/02/announcing-windows-11-insider-preview-build-25381/ When that change reaches the stable channel, it will be removed from the script since it won't be necessary anymore. Currently the script configures it in the Miscellaneous category:...

Upcoming Windows change: 🚀 TLS v1 and v1.1 are going to be disabled by default!

2

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/tls-1-0-and-tls-1-1-soon-to-be-disabled-in-windows/bc-p/3888775 When this change makes it to the stable builds of Windows, this hardening measure will no longer be necessary and will be removed from the hardening script.

Removed notice about not using UTF-8 encoding

1

## Description The UTF-8 encoding can totally be used for certificate subject names when deploying a signed WDAC policy and no problem such as boot failures occurs as a result...

Added one more item to the Audit mode policy changes

1

## Description Added info about 8 Required:EV Signers which applies to Audit mode policies as well. ## Why Because that info was missing from the document ## Changes Added this...

# What's New * Logging on the GUI has become slightly faster. * Applied some code optimizations. * The Microsoft Defender category now checks for the availability of the ConfigDefender...