Windows Defender Application Control

Named by 7 kept items in this workspace.

3 items name it under affected products, 3 under tools and 1 under classification.key entities.

Search every workspace for Windows Defender Application Control. It matches the name as written, so it can find other things that share it.

The items that name it 7

IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
articleas affected products2026-10-29It is written here as Windows Defender Application Control (WDAC): abused to disable EDR.
WDAC
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
articleas affected products2026-10-14It is written here as Windows Defender Application Control (WDAC) (CVE-2026-108398).
WDAC
Patch Tuesday - October 2026
advisoryas classification.key entities2026-10-13It is written here as WDAC.
ZDI: The October 2026 Security Update Review
advisoryas tools2026-10-13It is written here as Windows Defender Application Control (WDAC): application control whose enforcement CVE-2026-108398 can bypass.
WDAC
The Fine Art of Frustrating the Adversary
articleas tools2026-10-01
Application allowlisting technology recommended to permit approved RMM tools and block unapproved ones.
The Evolving Linux Threat Landscape
articleas affected products2026-03-03It is written here as Windows Defender Application Control (WDAC).
Windows security control bypassed via WSL since it validates Windows binaries (.exe, .dll, .sys) but not Linux ELF binaries run inside WSL
They Got In Through SonicWall. Then They Tried to Kill | Huntress
writeupas tools2026-02-04It is written here as WDAC (Windows Defender Application Control).
Recommended mechanism to deploy Microsoft's driver block rules to block known vulnerable drivers

All technologies in this workspace.