From f6bb55bb85734d904e38be6397b0276acf87d4fd Mon Sep 17 00:00:00 2001 From: x82phil Date: Thu, 16 May 2024 11:19:39 +0200 Subject: [PATCH] update releas page --- content/en/docs/wdac/_index.md | 8 + content/en/docs/wdac/policy/_index.md | 6 + content/en/docs/wdac/policy/base_policy_id.md | 49 ++++ content/en/docs/wdac/policy/cipolicy_xsd.md | 69 ++++++ content/en/docs/wdac/policy/ekus.md | 91 ++++++++ content/en/docs/wdac/policy/file_rules.md | 91 ++++++++ content/en/docs/wdac/policy/hvci_options.md | 91 ++++++++ content/en/docs/wdac/policy/macros.md | 107 +++++++++ content/en/docs/wdac/policy/platform_id.md | 49 ++++ content/en/docs/wdac/policy/policy_id.md | 49 ++++ content/en/docs/wdac/policy/policy_type_id.md | 48 ++++ content/en/docs/wdac/policy/rules.md | 91 ++++++++ content/en/docs/wdac/policy/settings.md | 91 ++++++++ content/en/docs/wdac/policy/signers.md | 215 ++++++++++++++++++ .../en/docs/wdac/policy/signing_scenarios.md | 91 ++++++++ .../policy/supplemental_policy_signers.md | 91 ++++++++ .../docs/wdac/policy/update_policy_signers.md | 91 ++++++++ content/en/docs/wdac/policy/version_ex.md | 45 ++++ 18 files changed, 1373 insertions(+) create mode 100644 content/en/docs/wdac/_index.md create mode 100644 content/en/docs/wdac/policy/_index.md create mode 100644 content/en/docs/wdac/policy/base_policy_id.md create mode 100644 content/en/docs/wdac/policy/cipolicy_xsd.md create mode 100644 content/en/docs/wdac/policy/ekus.md create mode 100644 content/en/docs/wdac/policy/file_rules.md create mode 100644 content/en/docs/wdac/policy/hvci_options.md create mode 100644 content/en/docs/wdac/policy/macros.md create mode 100644 content/en/docs/wdac/policy/platform_id.md create mode 100644 content/en/docs/wdac/policy/policy_id.md create mode 100644 content/en/docs/wdac/policy/policy_type_id.md create mode 100644 content/en/docs/wdac/policy/rules.md create mode 100644 content/en/docs/wdac/policy/settings.md create mode 100644 content/en/docs/wdac/policy/signers.md create mode 100644 content/en/docs/wdac/policy/signing_scenarios.md create mode 100644 content/en/docs/wdac/policy/supplemental_policy_signers.md create mode 100644 content/en/docs/wdac/policy/update_policy_signers.md create mode 100644 content/en/docs/wdac/policy/version_ex.md diff --git a/content/en/docs/wdac/_index.md b/content/en/docs/wdac/_index.md new file mode 100644 index 0000000..9e295ec --- /dev/null +++ b/content/en/docs/wdac/_index.md @@ -0,0 +1,8 @@ +--- +title: Windows Defender Application Control +linkTitle: WDAC +categories: [Examples, Placeholders] +tags: [test, docs] +description: > + **Windows Defender Application Control:** A short lead description about this section page. Text here can also be **bold** or _italic_ and can even be split over multiple paragraphs. +--- diff --git a/content/en/docs/wdac/policy/_index.md b/content/en/docs/wdac/policy/_index.md new file mode 100644 index 0000000..effa7eb --- /dev/null +++ b/content/en/docs/wdac/policy/_index.md @@ -0,0 +1,6 @@ +--- +title: Policy +linkTitle: Policy +description: > + **Policy:** A short lead description about this section page. Text here can also be **bold** or _italic_ and can even be split over multiple paragraphs. +--- diff --git a/content/en/docs/wdac/policy/base_policy_id.md b/content/en/docs/wdac/policy/base_policy_id.md new file mode 100644 index 0000000..5b7b369 --- /dev/null +++ b/content/en/docs/wdac/policy/base_policy_id.md @@ -0,0 +1,49 @@ +--- +weight: 20 +title: BasePolicyID +categories: [Examples] +tags: [test, sample, docs] +description: > + **BasePolicyID:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. +--- + + +This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values. + + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + [...] + + [...] + +``` + +```xsd + + + + + + +``` + + + +example +```xml + + + +``` + +## First Header + +This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. \ No newline at end of file diff --git a/content/en/docs/wdac/policy/cipolicy_xsd.md b/content/en/docs/wdac/policy/cipolicy_xsd.md new file mode 100644 index 0000000..5bb8560 --- /dev/null +++ b/content/en/docs/wdac/policy/cipolicy_xsd.md @@ -0,0 +1,69 @@ +--- +weight: 10 +title: General Layout +categories: [Examples] +tags: [test, sample, docs] +description: > + **General Policy Layout:** A policy relevant to WDAC (Windows Defender Application Control) is defined within an XML file. To understand the policy considered by WDAC, you can examine the policy XML schema stored in the _cipolicy.xsd_ file at _C:\Windows\schemas\CodeIntegrity\\_. +--- + +A policy relevant to WDAC (Windows Defender Application Control) is defined within an XML file. To understand the policy considered by WDAC, you can examine the policy XML schema stored in the _cipolicy.xsd_ file at _C:\Windows\schemas\CodeIntegrity\\_. This schema, describes the structure, constraints, and data types of a WDAC XML policy files. It defines the elements and attributes that can appear in an policy file, their order, relationships, and any restrictions or rules that apply to them. + +> The following provides an overview of the basic elements and attributes within the _SiPolicy_ element. In each policy file, _SiPolicy_ serves as the root element, signifying its role as the highest-level element that encapsulates all other elements and attributes within the file. + +```xsd + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +``` +**Code Block 1:** _SiPolicy_ elements and attributes +> Table 1 presents the names of the elements and attributes within _SiPolicy_ as well as a brief description of their core functionalities. + +| Name | Description | +| :--------: | :---------------: | +| VersionEx | ... | +| PolicyTypeID | ... | +| PlatformID | ... | +| PolicyID | ... | +| BasePolicyID | ... | +| Rules | ... | +| EKUs | This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values. | +| FileRules | ... | +| Signers | This element encompasses all signing certificates to be utilized in the rules outlined in the _SigningScenarios_ segment. Each signer entry mandates a CertRoot property, wherein the Value attribute denotes the hash of the cbData blob of the certificate. The hashing algorithm employed aligns with the algorithm specified in the certificate. This hash functions as a distinctive identifier for the certificate. | +| SigningScenarios | ... | +| UpdatePolicySigners | ... | +| HvciOptions | ... | +| Settings | ... | +| Macros | ... | +| SupplementalPolicySigners | ... | +| ... | ... | +| ... | ... | +{.table-bordered} +**Table 1:** Names of the elements and attributes and brief description diff --git a/content/en/docs/wdac/policy/ekus.md b/content/en/docs/wdac/policy/ekus.md new file mode 100644 index 0000000..41b93dd --- /dev/null +++ b/content/en/docs/wdac/policy/ekus.md @@ -0,0 +1,91 @@ +--- +weight: 20 +title: EKUs +categories: [Examples] +tags: [test, sample, docs] +description: > + **EKUs:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. +--- + +This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values. + + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Collection of EKUs. + + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Define an EKU + + + + + + + +``` +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + EKU ID type starts with ID_EKU_ + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +example +```xml + + + +``` + + + + + + + + + +## First Header + +This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. \ No newline at end of file diff --git a/content/en/docs/wdac/policy/file_rules.md b/content/en/docs/wdac/policy/file_rules.md new file mode 100644 index 0000000..753cf5b --- /dev/null +++ b/content/en/docs/wdac/policy/file_rules.md @@ -0,0 +1,91 @@ +--- +weight: 20 +title: FileRules +categories: [Examples] +tags: [test, sample, docs] +description: > + **FileRules:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. +--- + +This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values. + + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Collection of EKUs. + + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Define an EKU + + + + + + + +``` +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + EKU ID type starts with ID_EKU_ + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +example +```xml + + + +``` + + + + + + + + + +## First Header + +This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. \ No newline at end of file diff --git a/content/en/docs/wdac/policy/hvci_options.md b/content/en/docs/wdac/policy/hvci_options.md new file mode 100644 index 0000000..e9667f9 --- /dev/null +++ b/content/en/docs/wdac/policy/hvci_options.md @@ -0,0 +1,91 @@ +--- +weight: 20 +title: HvciOptions +categories: [Examples] +tags: [test, sample, docs] +description: > + **HvciOptions:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. +--- + +This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values. + + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Collection of EKUs. + + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Define an EKU + + + + + + + +``` +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + EKU ID type starts with ID_EKU_ + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +example +```xml + + + +``` + + + + + + + + + +## First Header + +This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. \ No newline at end of file diff --git a/content/en/docs/wdac/policy/macros.md b/content/en/docs/wdac/policy/macros.md new file mode 100644 index 0000000..145e856 --- /dev/null +++ b/content/en/docs/wdac/policy/macros.md @@ -0,0 +1,107 @@ +--- +weight: 20 +title: Macros +categories: [Examples] +tags: [test, sample, docs] +description: > + **Macros:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. +--- + +This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values. + + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + + + + A Macro element defines a text substitution macro that + can be used in other elements. Macros are referenced using NMAKE syntax, + i.e. $(runtime.windows). + + + + + Required. The Id for this macro, used in macro + references. For example, if the Id for this macro is + "runtime.windows", the macro would be referenced as + $(runtime.windows). + + + + + Required. The value that will be substituted for + macro references in macro- enabled XML attributes. + + + + + + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + + + + +``` +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +example +```xml + + + +``` + + + + + + + + + +## First Header + +This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. \ No newline at end of file diff --git a/content/en/docs/wdac/policy/platform_id.md b/content/en/docs/wdac/policy/platform_id.md new file mode 100644 index 0000000..ae137ca --- /dev/null +++ b/content/en/docs/wdac/policy/platform_id.md @@ -0,0 +1,49 @@ +--- +weight: 20 +title: PlatformID +categories: [Examples] +tags: [test, sample, docs] +description: > + **PlatformID:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. +--- + + +This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values. + + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + [...] + + [...] + +``` + +```xsd + + + + + + +``` + + + +example +```xml + + + +``` + +## First Header + +This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. \ No newline at end of file diff --git a/content/en/docs/wdac/policy/policy_id.md b/content/en/docs/wdac/policy/policy_id.md new file mode 100644 index 0000000..54dc0f5 --- /dev/null +++ b/content/en/docs/wdac/policy/policy_id.md @@ -0,0 +1,49 @@ +--- +weight: 20 +title: PolicyID +categories: [Examples] +tags: [test, sample, docs] +description: > + **PolicyID:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. +--- + + +This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values. + + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + [...] + + [...] + +``` + +```xsd + + + + + + +``` + + + +example +```xml + + + +``` + +## First Header + +This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. \ No newline at end of file diff --git a/content/en/docs/wdac/policy/policy_type_id.md b/content/en/docs/wdac/policy/policy_type_id.md new file mode 100644 index 0000000..d5dbb3a --- /dev/null +++ b/content/en/docs/wdac/policy/policy_type_id.md @@ -0,0 +1,48 @@ +--- +weight: 20 +title: PolicyTypeID +categories: [Examples] +tags: [test, sample, docs] +description: > + **PolicyTypeID:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. +--- + +This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values. + + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + [...] + + [...] + +``` + +```xsd + + + + + + +``` + + + +example +```xml + + + +``` + +## First Header + +This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. \ No newline at end of file diff --git a/content/en/docs/wdac/policy/rules.md b/content/en/docs/wdac/policy/rules.md new file mode 100644 index 0000000..5ed7544 --- /dev/null +++ b/content/en/docs/wdac/policy/rules.md @@ -0,0 +1,91 @@ +--- +weight: 20 +title: Rules +categories: [Examples] +tags: [test, sample, docs] +description: > + **Rules:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. +--- + +This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values. + + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Collection of EKUs. + + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Define an EKU + + + + + + + +``` +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + EKU ID type starts with ID_EKU_ + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +example +```xml + + + +``` + + + + + + + + + +## First Header + +This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. \ No newline at end of file diff --git a/content/en/docs/wdac/policy/settings.md b/content/en/docs/wdac/policy/settings.md new file mode 100644 index 0000000..dc15843 --- /dev/null +++ b/content/en/docs/wdac/policy/settings.md @@ -0,0 +1,91 @@ +--- +weight: 20 +title: Settings +categories: [Examples] +tags: [test, sample, docs] +description: > + **Settings:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. +--- + +This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values. + + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Collection of EKUs. + + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Define an EKU + + + + + + + +``` +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + EKU ID type starts with ID_EKU_ + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +example +```xml + + + +``` + + + + + + + + + +## First Header + +This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. \ No newline at end of file diff --git a/content/en/docs/wdac/policy/signers.md b/content/en/docs/wdac/policy/signers.md new file mode 100644 index 0000000..2015ad4 --- /dev/null +++ b/content/en/docs/wdac/policy/signers.md @@ -0,0 +1,215 @@ +--- +weight: 20 +title: Signers +categories: [Examples] +tags: [test, sample, docs] +description: > + **Signers:** This element encompasses all signing certificates to be utilized in the rules outlined in the _SigningScenarios_ segment. +--- + +This element encompasses all signing certificates to be utilized in the rules outlined in the _SigningScenarios_ segment. Each signer entry mandates a CertRoot property, wherein the Value attribute denotes the hash of the cbData blob of the certificate. The hashing algorithm employed aligns with the algorithm specified in the certificate. This hash functions as a distinctive identifier for the certificate. + + + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Collection of signers. + + + + + + + +``` +**Code Block 1:** _SiPolicy_ elements and attributes +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + A Signer + + + + + + + + + + + + + + + +``` +**Code Block 2:** _SiPolicy_ elements and attributes +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + + + + + +``` +**Code Block 3:** _SiPolicy_ elements and attributes +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + + + + +``` +**Code Block 4:** _SiPolicy_ elements and attributes +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + + + +``` +**Code Block 5:** _SiPolicy_ elements and attributes +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + EKU ID type starts with ID_EKU_ + + + + + + +``` +**Code Block 6:** _SiPolicy_ elements and attributes +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + + + +``` +**Code Block 7:** _SiPolicy_ elements and attributes +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + + + +``` +**Code Block 8:** _SiPolicy_ elements and attributes +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + + + +``` +**Code Block 9:** _SiPolicy_ elements and attributes +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + A FileAttribRef is used to reference a FILE_ATTRIB rule through ID + + + + + +``` +**Code Block 10:** _SiPolicy_ elements and attributes +```xsd + + + Generic file rule ID should start with ID_FILEATTRIB_ or ID_FILE_ + + + + + + +``` +**Code Block 11:** _SiPolicy_ elements and attributes + + + +```cpp +struct _KGATE +{ + _DISPATCHER_HEADER Header; + ULONG ProviderId; + GUID ProviderGuid; +}; +``` + + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +## First Header + +This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. \ No newline at end of file diff --git a/content/en/docs/wdac/policy/signing_scenarios.md b/content/en/docs/wdac/policy/signing_scenarios.md new file mode 100644 index 0000000..73a587d --- /dev/null +++ b/content/en/docs/wdac/policy/signing_scenarios.md @@ -0,0 +1,91 @@ +--- +weight: 20 +title: SigningScenarios +categories: [Examples] +tags: [test, sample, docs] +description: > + **SigningScenarios:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. +--- + +This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values. + + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Collection of EKUs. + + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Define an EKU + + + + + + + +``` +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + EKU ID type starts with ID_EKU_ + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +example +```xml + + + +``` + + + + + + + + + +## First Header + +This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. \ No newline at end of file diff --git a/content/en/docs/wdac/policy/supplemental_policy_signers.md b/content/en/docs/wdac/policy/supplemental_policy_signers.md new file mode 100644 index 0000000..bd92382 --- /dev/null +++ b/content/en/docs/wdac/policy/supplemental_policy_signers.md @@ -0,0 +1,91 @@ +--- +weight: 20 +title: SupplementalPolicySigners +categories: [Examples] +tags: [test, sample, docs] +description: > + **SupplementalPolicySigners:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. +--- + +This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values. + + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Collection of EKUs. + + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Define an EKU + + + + + + + +``` +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + EKU ID type starts with ID_EKU_ + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +example +```xml + + + +``` + + + + + + + + + +## First Header + +This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. \ No newline at end of file diff --git a/content/en/docs/wdac/policy/update_policy_signers.md b/content/en/docs/wdac/policy/update_policy_signers.md new file mode 100644 index 0000000..4f4c6eb --- /dev/null +++ b/content/en/docs/wdac/policy/update_policy_signers.md @@ -0,0 +1,91 @@ +--- +weight: 20 +title: UpdatePolicySigners +categories: [Examples] +tags: [test, sample, docs] +description: > + **UpdatePolicySigners:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. +--- + +This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values. + + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Collection of EKUs. + + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + Define an EKU + + + + + + + +``` +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + + EKU ID type starts with ID_EKU_ + + + + + + +``` + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +example +```xml + + + +``` + + + + + + + + + +## First Header + +This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. \ No newline at end of file diff --git a/content/en/docs/wdac/policy/version_ex.md b/content/en/docs/wdac/policy/version_ex.md new file mode 100644 index 0000000..56b1eb7 --- /dev/null +++ b/content/en/docs/wdac/policy/version_ex.md @@ -0,0 +1,45 @@ +--- +weight: 20 +title: VersionEx +categories: [Examples] +tags: [test, sample, docs] +description: > + **EKUs:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. +--- + +This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values. + + +> There should be no margin above this first sentence. +> +> Blockquotes should be a lighter gray with a border along the left side in the secondary color. +> +> There should be no margin below this final sentence. + +```xsd + + [...] + + [...] + +``` + + +```xsd + + + + + +``` + +example +```xml + + + +``` + +## First Header + +This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. \ No newline at end of file