WDAC Lockdown

For people who do not utilize Microsoft Defender as their main AV, but want an easy way to configure WDAC, you might want to try WDAC Lockdown. BTW, you can only run either CyberLock OR DefenderUI Pro OR WDAC Lockdown at a time since they all have the same kernel mode driver.

WDAC Lockdown 1.20
https://wdaclockdown.com/Download/InstallWDACLockdown.exe
SHA-256: 1b5d119f6becf828ea095365a76371fe7801ad4cda1cade53f7e8841645e0479
WDAC Lockdown

https://wdaclockdown.com/favicon.ico wdaclockdown.com

Overall WDAC Lockdown is in great shape, but I am sure we will need to tweak a couple of things, so if you guys find anything please let me know.

 

Generally speaking would it be better to uninstall CyberLock and DefenderUI and run WGAC Lockdown in their stead? What are thoughts around this?

 

If it were me I'd keep Cyberlock and DefenderUI.

 

Email from Dan:

 

I thought as much. Thanks dc.

 

From Dan and to see more: https://www.wilderssecurity.com/threads/defenderui.439693/page-11#post-3197232

WDAC Lockdown 1.22

https://wdaclockdown.com/Download/InstallWDACLockdown.exe

SHA-256: 9960333b3e4fa657e7abbd02fcf56646576cc2221abf1fe40e31f615de425137

 

On the home site it says that you can scan in Windows sandbox, can anyone who has Pro version confirm this?
I installed it on Home version and can not even see the option available.

 

Windows Sandbox is only on Windows Pro or above. https://learn.microsoft.com/en-us/w...tion/windows-sandbox/windows-sandbox-overview

 

Yes i know that but, the question was about the scan option. I figured it may be present but dead in Home, hence the "not even see" in my post.
So, again, is the scan option present in Pro version - anywhere?

 

To clarify, this tool only applies to Win 11, right?

 

I don't have Windows Sandbox installed at this time and if you did you would have to go into CyberLock Pro UI and enable the features. And it's for both Win 10 and 11 Pro and above! I don't use DefenderUI or WDAC Lockdown so I can't say.

 

Still no answer to the question, which was about the scaning.

Anyway, installed it and found it, but is was well hidden. Not obvious at all.

 

@Triple Helix

I have Windows Sandbox installed, but have never used it.

 

Right click on a installer with Cyberlock and scan it and click on install in Sandbox in the prompt.

 

I did buy
VMware Workstation v 14 years ago but wasn't confident enough to use it.

 

I will post some pictures in the Cyberlock thread because we are getting off topic in this thread as i don't know WDAC Lockdown.

 

That's OK. I don't think I need [to use] WDAC Lockdown. I will stick with VS/CyberLock.

 

In regards to WDAC Lockdown, I installed it yesterday on an older laptop running Bitdefender AV and Kerish Doctor. I immediately placed it into training mode. I will say that it slowed my computer to a crawl. I started opening up various software programs in an effort to "train" WDAC but each program opening took quite a while (along with pop ups asking me if I wanted to allow the program to run). Opening Discord took quite a while with multiple pop ups for various processes. I've left it installed for now and I'll leave it in training mode, but my first impressions are not positive. It had a significant impact on this old laptop in terms of usability.

 

Email from Dan:

 

After trying both version 1.22 and 1.23 I noticed that version 1.23 automatically turns off the kernel lockdown when you implement the training mode. The end result for me was zero blocks while in the training mode and a much faster system. I am curious to see what happens after I turn off the training mode and re-enable the kernel lockdown in 1.23.

 

BTW--WDAC 1.23 in training mode would not allow the Prime Video app (from the Microsoft store) or the Netflix app (from the Microsoft store) connect to their servers. I had to totally close down WDAC to get them to connect.

 

Its like with Microsoft Defender for Business. Be careful what policies you enable. The protection can block something you need.

 

I am running 7.77 and occasionally CyberLock will enter the Training mode. This makes me uneasy. I don't know what is triggering that. Seems strange. I have set CL for Smart/Aggressive from the start.

 

Email from Dan:

 

For some reason tonight ALL WDAC Lockdown 1.27 links at MT and elsewhere are Out-Of-Order or OFFLine