Skip to content
Threat Feed
Subscribe

Product

Windows Defender Application Control

2 briefs RSS
high advisory

WDAC Policy File Creation by Unusual Process

Adversaries may create Windows Defender Application Control (WDAC) policy files using unusual processes to impair defenses and restrict the execution of security products on compromised systems.

Windows Defender Application Control wdac defense-evasion windows
2r 1t
low advisory

Code Integrity - Unmet Signing Level Requirements

Windows Code Integrity events 3033 and 3034 indicate an attempted file load that failed to meet the configured signing level requirements, potentially due to revoked signatures or expired certificates, signaling a possible attempt to load unsigned or untrusted code.

Windows +1 codeintegrity execution
2r 1t