Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | Read The Rationale https://github.com/HotCakeX/Harden-Windows-Security/blob/main/Rationale.md
Added a new cmdlet named Remove-CommonWDACConfig, used for removing individual items from the user configurations Json file. You can read more about this new cmdlet here.
Improved the parameters of the Confirm-WDACConfig cmdlet by incorporating dynamic parameters.
The WDACConfig module now only checks for updates if at least 10 minutes have passed since the last update check.
Substantially improved the workflow of the Deploy-SignedWDACConfig cmdlet. It's smarter now when dealing with signing and deploying the strict kernel mode policies.
To prevent infinite nested looping for update checks, the 3 cmdlets that are also internally used, Get-commonWDACConfig, Set-CommonWDACConfig and Remove-CommonWDACConfig do not perform module update checks.
Improved New-KernelModeWDACConfig cmdlet, specially for when you just want to create a Strict kernel mode policy and then use the Deploy-SignedWDACConfig cmdlet to sign and deploy it. Lots of automation and abstractions have been added to make the process as automated and smooth as possible.
Changed some of the displayed messages in Remove-WDACConfig cmdlet to be only shown if -Debug parameter is used.
Removed -DeleteUserConfig parameter from Set-CommonWDACConfig cmdlet, because all deletion/removal operations related to User Config file is now handled by Remove-CommonWDACConfig cmdlet.
What's Changed
Remove-CommonWDACConfig, used for removing individual items from the user configurations Json file. You can read more about this new cmdlet here.Confirm-WDACConfigcmdlet by incorporating dynamic parameters.Deploy-SignedWDACConfigcmdlet. It's smarter now when dealing with signing and deploying the strict kernel mode policies.Get-commonWDACConfig,Set-CommonWDACConfigandRemove-CommonWDACConfigdo not perform module update checks.New-KernelModeWDACConfigcmdlet, specially for when you just want to create a Strict kernel mode policy and then use theDeploy-SignedWDACConfigcmdlet to sign and deploy it. Lots of automation and abstractions have been added to make the process as automated and smooth as possible.Remove-WDACConfigcmdlet to be only shown if-Debugparameter is used.-DeleteUserConfigparameter fromSet-CommonWDACConfigcmdlet, because all deletion/removal operations related to User Config file is now handled byRemove-CommonWDACConfigcmdlet.