What's Changed
- Significantly improved the
Invoke-WDACSimulationcmdlet's performance. It's faster, better and outputs CSV file for the result of the simulation. - Added new parameter for
Deploy-SignedWDACcmdlet, called-Deploy. When used, it will deploy the signed policy on the current system, otherwise it will only create the signed policy. This is specially useful for when you want to deploy the policy somewhere else using the Citool.exe built-in tool. - Changed all the
-Deployitparameter names to-Deploy. - Added
-Deployparameter forNew-WDACConfig -PrepMSFTOnlyAuditandNew-WDACConfig -PrepDefaultWindowsAudit. This allows you to deploy those audit policies remotely to collect audit logs. - Added error handling for
Get-CommonWDACConfigcmdlet when the user configuration json file is nonexistent. - Added Filepicker UI for
-CertPathparameter of all the cmdlets that use it. - Removed
-DeployLatestDriverBlockRulesparameter fromNew-WDACConfigcmdlet and instead added the optional-Deployparameter toNew-WDACConfig -GetDriverBlockRules, it does the same task. - Removed
-DeployLatestBlockRulesparameter fromNew-WDACConfigcmdlet and instead added the optional-Deployparameter toNew-WDACConfig -GetBlockRules, it does the same task. - The
Confirm-WDACConfignow runs all 3 checks if you use it without passing any parameters. - Improved the UX by implementing file picker UI for when you need to browse for the SignTool.exe in
Edit-SignedWDACConfig,Remove-WDACConfigandDeploy-SignedWDACConfig - Improved the self updating mechanism and its messages.
- Fixed a bug in an edge case where
Remove-WDACConfigcmdlet wouldn't auto complete policy names if one of the policies didn't have a friendly name. Remove-WDACConfigcmdlet now shows-PolicyNamesfirst above the-PolicyIDsfor more convenience.
PR: #101