microsoft / mdatp-devicecontrol

Microsoft Defender for Endpoint Device Control tools, samples, and resources.
https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-removable-storage-protection?view=o365-worldwide
MIT License
45 stars 36 forks source link

[macOS] Add macOS v1 policy upgrade script #23

Closed bryan-lipinski closed 1 year ago

bryan-lipinski commented 1 year ago

Add a script to upgrade a v1 DC for macOS policy to the new format. The tool uses a naive approach to convert every single node of a v1 policy into a single v2 group and rule. The output policy can be further manually manipulated to coalesce the naive groups/rules to reduce the overall complexity and increase maintainability.