Skip to content

Instantly share code, notes, and snippets.

@mgraeber-rc
Created September 14, 2023 18:57
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mgraeber-rc/36aab2b58bf780ebcc9e8b9bc1c93917 to your computer and use it in GitHub Desktop.
Save mgraeber-rc/36aab2b58bf780ebcc9e8b9bc1c93917 to your computer and use it in GitHub Desktop.
Recovered WDAC Inbox Policy: VerifiedAndReputableDesktopEvaluationTestSupplemental
<?xml version="1.0"?>
<SiPolicy xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" PolicyType="Supplemental Policy" xmlns="urn:schemas-microsoft-com:sipolicy">
<VersionEx>0.0.0.0</VersionEx>
<PlatformID>{2E07F7E4-194C-4D20-B7C9-6F44A6C5A234}</PlatformID>
<PolicyID>{1939ED82-BFD5-4D32-B58E-D31D3C49715A}</PolicyID>
<BasePolicyID>{1283AC0F-FFF1-49AE-ADA1-8A933130CAD6}</BasePolicyID>
<Rules>
<Rule>
<Option>Disabled:Runtime FilePath Rule Protection</Option>
</Rule>
<Rule>
<Option>Enabled:Managed Installer</Option>
</Rule>
</Rules>
<FileRules>
<Allow ID="ID_ALLOW_A_0001" FilePath="C:\Data\test\*" />
<Allow ID="ID_ALLOW_A_0002" FilePath="C:\test\*" />
</FileRules>
<Signers>
<Signer Name="Signer 1" ID="ID_SIGNER_S_0001">
<CertRoot Type="TBS" Value="53FEFC045D7668833ABFA335FC92E17572E921A509DC0919EE435989582DDFD9" />
</Signer>
<Signer Name="Signer 2" ID="ID_SIGNER_S_0002">
<CertRoot Type="TBS" Value="300217091313D230385D9EB39B833B63BE0E3060EFECEC995918231E0B2D0A2A" />
</Signer>
<Signer Name="Signer 3" ID="ID_SIGNER_S_0003">
<CertRoot Type="TBS" Value="5137EC4BA1F1245240719F163A47DB5D2A85AA6B6BA583A0DF1C11FC3E9E3D96" />
</Signer>
<Signer Name="Signer 4" ID="ID_SIGNER_S_0004">
<CertRoot Type="Wellknown" Value="0A" />
</Signer>
<Signer Name="Signer 5" ID="ID_SIGNER_S_0005">
<CertRoot Type="Wellknown" Value="0A" />
</Signer>
<Signer Name="Signer 6" ID="ID_SIGNER_S_0006">
<CertRoot Type="Wellknown" Value="0A" />
</Signer>
</Signers>
<SigningScenarios>
<SigningScenario ID="ID_SIGNINGSCENARIO_DRIVERS_1" Value="131">
<ProductSigners>
<AllowedSigners>
<AllowedSigner SignerId="ID_SIGNER_S_0005" />
</AllowedSigners>
</ProductSigners>
<TestSigners />
<TestSigningSigners />
</SigningScenario>
<SigningScenario ID="ID_SIGNINGSCENARIO_WINDOWS" Value="12">
<ProductSigners>
<AllowedSigners>
<AllowedSigner SignerId="ID_SIGNER_S_0001" />
<AllowedSigner SignerId="ID_SIGNER_S_0002" />
<AllowedSigner SignerId="ID_SIGNER_S_0003" />
<AllowedSigner SignerId="ID_SIGNER_S_0004" />
</AllowedSigners>
<FileRulesRef>
<FileRuleRef RuleID="ID_ALLOW_A_0001" />
<FileRuleRef RuleID="ID_ALLOW_A_0002" />
</FileRulesRef>
</ProductSigners>
<TestSigners />
<TestSigningSigners />
</SigningScenario>
</SigningScenarios>
<UpdatePolicySigners>
<UpdatePolicySigner SignerId="ID_SIGNER_S_0006" />
</UpdatePolicySigners>
<CiSigners>
<CiSigner SignerId="ID_SIGNER_S_0001" />
<CiSigner SignerId="ID_SIGNER_S_0002" />
<CiSigner SignerId="ID_SIGNER_S_0003" />
<CiSigner SignerId="ID_SIGNER_S_0004" />
</CiSigners>
<Settings>
<Setting Provider="PolicyInfo" Key="Information" ValueName="Id">
<Value>
<String>22549.1000.220201</String>
</Value>
</Setting>
<Setting Provider="PolicyInfo" Key="Information" ValueName="Name">
<Value>
<String>VerifiedAndReputableDesktopEvaluationTestSupplemental</String>
</Value>
</Setting>
</Settings>
</SiPolicy>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment