Installation

Install it from the Microsoft Store: https://apps.microsoft.com/detail/9png1jddtgp8

What's New

(irm 'https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/main/Harden-Windows-Security.ps1')+'AppControl'|iex

• Added animated icons to the main navigation and some of the buttons. They respond to dark/light theme change as well. They aren't on by default, you can go to the Settings page => Appearance and turn them on. If enough users who would like to see it turned on by default comment it down below or let me know, then i can do so, but i respect some people might not like the extra animations so it's off by default.

  • Just like any other settings in the app, your changes will be saved and won't be lost after app restart or update.

  • Added new option to the appearance setting that allows you to choose an icons style. You can switch between the new animated icons, the default monochromatic icons and a default icons + Windows accent color.

• Improved "Allow new apps" scenario's logic by detecting ECC signed files across both event logs and local file scan results.

• The "Allow new apps" page will now show small and subtle indicators that contain the total count of event logs and local scan results at the top of their respective navigation items. They're updated in real time.

• Made all JSON serialization/deserializations source-generated for improved performance.

• The MSIX package is now 40MBs smaller as a result of removing unnecessary packages: PowerShell.SDK, System.Management.Automation and Microsoft.Windows.SDK.BuildTools. This improves code security, reliability and predictability.

• All the logics related to certificate creation/import/export and app installation/uninstallation have been natively implemented in C#.

• Improved the update process's security. It no longer creates a PFX file and the on-device generated certificate's private key is non-exportable.

• Improved the update process. Now it first checks if SignTool.exe path exists in the user configurations file and if it does then uses it, otherwise proceeds with downloading it from Microsoft NuGet repository as before.

PR: #410