Re: Defense in depth — the Microsoft way (part 47): "AppLocker bypasses are not serviced via monthly security roll-ups"

Posted by Stefan Kanthak on Mar 28

I wrote Tuesday, March 21, 2017 8:09 PM:

[ …snip… ]

[ …snip… ]

If you can’t create an “AppCert.Dll” from the code I depicted or
don’t know how to implement the function “forbidden()” yourself:
just visit <https://skanthak.homepage.t-online.de/appcert.html>,
read it and get the prebuilt DLLs plus their .INF setup script,
packaged in a .CAB archive.

enjoy
Stefan Kanthak

Leave a Reply