Reset-Appx script. What would be the correct detection rule?

byteben / MEM

40 stars 8 forks source link

Reset-Appx script. What would be the correct detection rule? #13

Open Eirinn75 opened 6 months ago

Eirinn75 commented 6 months ago

Not exactly an issue, but I was planning to use the Reset-Appx script in order to fix the transition from user to system context. Instead of deploying it as a win 32app or a script, I'd like to deploy this as a remediation script, but I don't know what would be a reliable detection rule in this case. Could you help?

thrasherca commented 3 weeks ago

Also wondering what the best configuration would be for Remediation scripting. Would love to see this split into two scripts (detection and remediation) and have meaningful results in the Device Status tab!