Installation

Install it from the Microsoft Store: https://apps.microsoft.com/detail/9png1jddtgp8

What's New

Introducing Policy Editor

Leverage the Policy Editor page to effortlessly refine your App Control policy files. With this tool, you can remove individual rules or clear all rules in one action, while accurately displaying the count of each rule type. Seamlessly search for the rule you wish to modify, and easily update policy details such as name, type, version, policy ID info, type ID, base policy ID, and HVCI option level.

Eliminate the need for error-prone, manual editing in a text editor. When you modify App Control policies with the Policy Editor, your policy remains fully compliant with the Code Integrity schema throughout the process.

This feature also deduplicates any redundant rules or signers within the policy file.

The Policy Editor has been a highly anticipated feature currently being tracked in this issue.

This is only the phase 1 of implementing the Policy Editor feature. Phase 2 will integrate it deeply into the app and will possibly include an option in the Windows 11 context-menu (right-click) where you will be able to select an XML file and open it in the AppControl Manager instantly.

Please refer to the Policy Editor page's documentation for full details.

Other Changes

• Updated the dependencies to the latest versions, including the .NET SDK and WinAppSDK.
• Improved the performance of the merge operation.
• Improved the performance of the searches in all of the pages that host ListViews.
• The Sidebar icon on the title bar no longer has a border around it, making it more consistent with other elements in the title bar.

PRs

• Bump dotnet-sdk from 9.0.200 to 9.0.201 in /AppControl Manager by @dependabot in #642
• Implemented Policy Editor in the AppControl Manager by @HotCakeX in #645
• Added clear button to the Policy Editor and created new documents for it by @HotCakeX in #648

How to verify the MSIXBundle's authenticity:

gh attestation verify "Path To MSIXBundle" --repo HotCakeX/Harden-Windows-Security --format json

You can install the GitHub CLI from Winget:

winget install --id GitHub.cli