Skip to content

Commit f6bb55b

Browse files
x86philx86phil
committed
update releas page
1 parent 5bd3c61 commit f6bb55b

18 files changed

+1373
-0
lines changed

‎content/en/docs/wdac/_index.md

+8
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
---
2+
title: Windows Defender Application Control
3+
linkTitle: WDAC
4+
categories: [Examples, Placeholders]
5+
tags: [test, docs]
6+
description: >
7+
**Windows Defender Application Control:** A short lead description about this section page. Text here can also be **bold** or _italic_ and can even be split over multiple paragraphs.
8+
---

‎content/en/docs/wdac/policy/_index.md

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
---
2+
title: Policy
3+
linkTitle: Policy
4+
description: >
5+
**Policy:** A short lead description about this section page. Text here can also be **bold** or _italic_ and can even be split over multiple paragraphs.
6+
---

‎content/en/docs/wdac/policy/base_policy_id.md

+49
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,49 @@
1+
---
2+
weight: 20
3+
title: BasePolicyID
4+
categories: [Examples]
5+
tags: [test, sample, docs]
6+
description: >
7+
**BasePolicyID:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers.
8+
---
9+
10+
11+
This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values.
12+
13+
14+
> There should be no margin above this first sentence.
15+
>
16+
> Blockquotes should be a lighter gray with a border along the left side in the secondary color.
17+
>
18+
> There should be no margin below this final sentence.
19+
20+
```xsd
21+
<xs:element name="SiPolicy">
22+
[...]
23+
<xs:element name="BasePolicyID" type="GuidType" minOccurs="0" maxOccurs="1" />
24+
[...]
25+
</xs:element>
26+
```
27+
28+
```xsd
29+
<!-- A {00000000-0000-0000-0000-000000000000} GUID type -->
30+
<xs:simpleType name="GuidType">
31+
<xs:restriction base="xs:string">
32+
<xs:pattern
33+
value="\{[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}\}" />
34+
</xs:restriction>
35+
</xs:simpleType>
36+
```
37+
38+
39+
40+
example
41+
```xml
42+
<EKUs>
43+
<EKU ID="ID_EKU_A_1" Value="010A2B0601040182374C0801" FriendlyName="1.3.6.1.4.1.311.76.8.1" />
44+
</EKUs>
45+
```
46+
47+
## First Header
48+
49+
This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong.

‎content/en/docs/wdac/policy/cipolicy_xsd.md

+69
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,69 @@
1+
---
2+
weight: 10
3+
title: General Layout
4+
categories: [Examples]
5+
tags: [test, sample, docs]
6+
description: >
7+
**General Policy Layout:** A policy relevant to WDAC (Windows Defender Application Control) is defined within an XML file. To understand the policy considered by WDAC, you can examine the policy XML schema stored in the _cipolicy.xsd_ file at _C:\Windows\schemas\CodeIntegrity\\_.
8+
---
9+
10+
A policy relevant to WDAC (Windows Defender Application Control) is defined within an XML file. To understand the policy considered by WDAC, you can examine the policy XML schema stored in the _cipolicy.xsd_ file at _C:\Windows\schemas\CodeIntegrity\\_. This schema, describes the structure, constraints, and data types of a WDAC XML policy files. It defines the elements and attributes that can appear in an policy file, their order, relationships, and any restrictions or rules that apply to them.
11+
12+
> The following provides an overview of the basic elements and attributes within the _SiPolicy_ element. In each policy file, _SiPolicy_ serves as the root element, signifying its role as the highest-level element that encapsulates all other elements and attributes within the file.
13+
14+
```xsd
15+
<xs:element name="SiPolicy">
16+
<xs:complexType>
17+
<xs:all>
18+
<xs:element name="VersionEx" type="VersionExType" minOccurs="1" maxOccurs="1" />
19+
<xs:element name="PolicyTypeID" type="GuidType" minOccurs="0" maxOccurs="1" />
20+
<xs:element name="PlatformID" type="GuidType" minOccurs="1" maxOccurs="1" />
21+
<xs:element name="PolicyID" type="GuidType" minOccurs="0" maxOccurs="1" />
22+
<xs:element name="BasePolicyID" type="GuidType" minOccurs="0" maxOccurs="1" />
23+
<xs:element name="Rules">
24+
<xs:complexType>
25+
<xs:sequence>
26+
<xs:element name="Rule" type="RuleType" minOccurs="0" maxOccurs="65535" />
27+
</xs:sequence>
28+
</xs:complexType>
29+
</xs:element>
30+
<xs:element ref="EKUs" minOccurs="0" maxOccurs="1" />
31+
<xs:element ref="FileRules" minOccurs="0" maxOccurs="1" />
32+
<xs:element ref="Signers" minOccurs="0" maxOccurs="1" />
33+
<xs:element ref="SigningScenarios" minOccurs="0" maxOccurs="1" />
34+
<xs:element ref="UpdatePolicySigners" minOccurs="0" maxOccurs="1" />
35+
<xs:element ref="CiSigners" minOccurs="0" maxOccurs="1" />
36+
<xs:element name="HvciOptions" type="DWordType" minOccurs="0" maxOccurs="1" />
37+
<xs:element ref="Settings" minOccurs="0" maxOccurs="1" />
38+
<xs:element ref="Macros" minOccurs="0" maxOccurs="1" />
39+
<xs:element ref="SupplementalPolicySigners" minOccurs="0" maxOccurs="1" />
40+
</xs:all>
41+
<xs:attribute name="FriendlyName" type="xs:string" use="optional" />
42+
<xs:attribute name="PolicyType" type="PolicyType" use="optional" />
43+
</xs:complexType>
44+
</xs:element>
45+
```
46+
**Code Block 1:** _SiPolicy_ elements and attributes
47+
> Table 1 presents the names of the elements and attributes within _SiPolicy_ as well as a brief description of their core functionalities.
48+
49+
| Name | Description |
50+
| :--------: | :---------------: |
51+
| VersionEx | ... |
52+
| PolicyTypeID | ... |
53+
| PlatformID | ... |
54+
| PolicyID | ... |
55+
| BasePolicyID | ... |
56+
| Rules | ... |
57+
| EKUs | This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values. |
58+
| FileRules | ... |
59+
| Signers | This element encompasses all signing certificates to be utilized in the rules outlined in the _SigningScenarios_ segment. Each signer entry mandates a CertRoot property, wherein the Value attribute denotes the hash of the cbData blob of the certificate. The hashing algorithm employed aligns with the algorithm specified in the certificate. This hash functions as a distinctive identifier for the certificate. |
60+
| SigningScenarios | ... |
61+
| UpdatePolicySigners | ... |
62+
| HvciOptions | ... |
63+
| Settings | ... |
64+
| Macros | ... |
65+
| SupplementalPolicySigners | ... |
66+
| ... | ... |
67+
| ... | ... |
68+
{.table-bordered}
69+
**Table 1:** Names of the elements and attributes and brief description

‎content/en/docs/wdac/policy/ekus.md

+91
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,91 @@
1+
---
2+
weight: 20
3+
title: EKUs
4+
categories: [Examples]
5+
tags: [test, sample, docs]
6+
description: >
7+
**EKUs:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers.
8+
---
9+
10+
This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values.
11+
12+
13+
> There should be no margin above this first sentence.
14+
>
15+
> Blockquotes should be a lighter gray with a border along the left side in the secondary color.
16+
>
17+
> There should be no margin below this final sentence.
18+
19+
```xsd
20+
<xs:element name="EKUs">
21+
<xs:annotation>
22+
<xs:documentation> Collection of EKUs. </xs:documentation>
23+
</xs:annotation>
24+
<xs:complexType>
25+
<xs:choice minOccurs="1" maxOccurs="255">
26+
<xs:element ref="EKU" minOccurs="0" maxOccurs="255" />
27+
</xs:choice>
28+
</xs:complexType>
29+
</xs:element>
30+
```
31+
32+
> There should be no margin above this first sentence.
33+
>
34+
> Blockquotes should be a lighter gray with a border along the left side in the secondary color.
35+
>
36+
> There should be no margin below this final sentence.
37+
38+
```xsd
39+
<xs:element name="EKU">
40+
<xs:annotation>
41+
<xs:documentation> Define an EKU </xs:documentation>
42+
</xs:annotation>
43+
<xs:complexType>
44+
<xs:attribute name="ID" type="EKUType" use="required" />
45+
<xs:attribute name="Value" type="xs:hexBinary" use="required" />
46+
<xs:attribute name="FriendlyName" type="xs:string" use="optional" />
47+
</xs:complexType>
48+
</xs:element>
49+
```
50+
> There should be no margin above this first sentence.
51+
>
52+
> Blockquotes should be a lighter gray with a border along the left side in the secondary color.
53+
>
54+
> There should be no margin below this final sentence.
55+
56+
```xsd
57+
<xs:simpleType name="EKUType">
58+
<xs:annotation>
59+
<xs:documentation> EKU ID type starts with ID_EKU_ </xs:documentation>
60+
</xs:annotation>
61+
<xs:restriction base="xs:string">
62+
<xs:pattern value="ID_EKU_[A-Z][_A-Z0-9]*" />
63+
<xs:minLength value="1" />
64+
</xs:restriction>
65+
</xs:simpleType>
66+
```
67+
68+
> There should be no margin above this first sentence.
69+
>
70+
> Blockquotes should be a lighter gray with a border along the left side in the secondary color.
71+
>
72+
> There should be no margin below this final sentence.
73+
74+
example
75+
```xml
76+
<EKUs>
77+
<EKU ID="ID_EKU_A_1" Value="010A2B0601040182374C0801" FriendlyName="1.3.6.1.4.1.311.76.8.1" />
78+
</EKUs>
79+
```
80+
81+
82+
83+
84+
85+
86+
87+
88+
89+
## First Header
90+
91+
This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong.

‎content/en/docs/wdac/policy/file_rules.md

+91
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,91 @@
1+
---
2+
weight: 20
3+
title: FileRules
4+
categories: [Examples]
5+
tags: [test, sample, docs]
6+
description: >
7+
**FileRules:** This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers.
8+
---
9+
10+
This element consists of a list of Extended Key Usages (EKUs) that can be applied to signers. When incorporated into a signer rule, the EKU specified in the certificate must match that in the certificate used for signing. Each EKU instance possesses a "Value" attribute, comprising an encoded OID. For instance, to mandate WHQL signing, the "Windows Hardware Driver Verification" EKU (1.3.6.1.4.1.311.10.3.5) must be assigned to those drivers. The encoded "Value" attribute would be "010A2B0601040182370A0305" (where the first byte, typically 0x06 for absolute OID, is replaced with 0x01). The process of OID encoding is detailed here. ConvertTo-CIPolicy decodes and resolves the original FriendlyName attribute for encoded OID values.
11+
12+
13+
> There should be no margin above this first sentence.
14+
>
15+
> Blockquotes should be a lighter gray with a border along the left side in the secondary color.
16+
>
17+
> There should be no margin below this final sentence.
18+
19+
```xsd
20+
<xs:element name="EKUs">
21+
<xs:annotation>
22+
<xs:documentation> Collection of EKUs. </xs:documentation>
23+
</xs:annotation>
24+
<xs:complexType>
25+
<xs:choice minOccurs="1" maxOccurs="255">
26+
<xs:element ref="EKU" minOccurs="0" maxOccurs="255" />
27+
</xs:choice>
28+
</xs:complexType>
29+
</xs:element>
30+
```
31+
32+
> There should be no margin above this first sentence.
33+
>
34+
> Blockquotes should be a lighter gray with a border along the left side in the secondary color.
35+
>
36+
> There should be no margin below this final sentence.
37+
38+
```xsd
39+
<xs:element name="EKU">
40+
<xs:annotation>
41+
<xs:documentation> Define an EKU </xs:documentation>
42+
</xs:annotation>
43+
<xs:complexType>
44+
<xs:attribute name="ID" type="EKUType" use="required" />
45+
<xs:attribute name="Value" type="xs:hexBinary" use="required" />
46+
<xs:attribute name="FriendlyName" type="xs:string" use="optional" />
47+
</xs:complexType>
48+
</xs:element>
49+
```
50+
> There should be no margin above this first sentence.
51+
>
52+
> Blockquotes should be a lighter gray with a border along the left side in the secondary color.
53+
>
54+
> There should be no margin below this final sentence.
55+
56+
```xsd
57+
<xs:simpleType name="EKUType">
58+
<xs:annotation>
59+
<xs:documentation> EKU ID type starts with ID_EKU_ </xs:documentation>
60+
</xs:annotation>
61+
<xs:restriction base="xs:string">
62+
<xs:pattern value="ID_EKU_[A-Z][_A-Z0-9]*" />
63+
<xs:minLength value="1" />
64+
</xs:restriction>
65+
</xs:simpleType>
66+
```
67+
68+
> There should be no margin above this first sentence.
69+
>
70+
> Blockquotes should be a lighter gray with a border along the left side in the secondary color.
71+
>
72+
> There should be no margin below this final sentence.
73+
74+
example
75+
```xml
76+
<EKUs>
77+
<EKU ID="ID_EKU_A_1" Value="010A2B0601040182374C0801" FriendlyName="1.3.6.1.4.1.311.76.8.1" />
78+
</EKUs>
79+
```
80+
81+
82+
83+
84+
85+
86+
87+
88+
89+
## First Header
90+
91+
This is a normal paragraph following a header. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong. Bacon ipsum dolor sit amet t-bone doner shank drumstick, pork belly porchetta chuck sausage brisket ham hock rump pig. Chuck kielbasa leberkas, pork bresaola ham hock filet mignon cow shoulder short ribs biltong.

0 commit comments

Comments
 (0)