![]() Example 4: Get file information for Audited events PS C:\> Get-AppLockerFileInformation -EventLog -EventType Audited This example outputs the file information for all the packaged applications installed on this computer for all users. Publisher : CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US\WinStore\APPX,1.0.0.0 Path : WinStore_1.0.0.0_neutral_neutral_cw5n1h2txyewy.appx Path : windows.RemoteDesktop_1.0.0.0_neutral_neutral_cw5n1h2txyewy.appx Publisher : CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington,Ĭ=US\windows.immersivecontrolpanel\APPX,6.2.0.0 Path : windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy.appx Example 3: Get file information for all packaged applications for all users PS C:\> Get-AppXPackage -AllUsers | Get-AppLockerFileInformation This example gets the file information for the file specified by the path. PS C:\> Get-AppLockerFileInformation -Path "C:\Program Files\Internet Explorer\iexplore.exe" | Format-List Publisher : CN=WINDOWS MAIN BUILD LAB ACCOUNT\WINDOWS® INTERNET EXPLORER\IEXPLORE.EXE.0 Path : %PROGRAMFILES%\INTERNET EXPLORER\IEXPLORE.EXE ![]() Example 2: Get file information for a file PS C:\> Get-AppLockerFileInformation -Path "C:\Program Files (x86)\Internet Explorer\iexplore.exe" | Format-List exe files and scripts under %windir%\system32. This example gets the file information for all the. exe files and scripts PS C:\> Get-AppLockerFileInformation -Directory C:\Windows\system32\ -Recurse -FileType exe, script Examples Example 1: Get file information for. The file information from an event log may not contain all of the publisher information, file hash, and file path fields.įiles that are not signed will not have any publisher information. The Get-AppLockerFileInformation cmdlet gets the AppLocker file information from a list of files or an event log.įile information includes the publisher information, file hash, and file path. In this article Syntax Get-App Locker File Information Gets the file information necessary to create AppLocker rules from a list of files or an event log.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |