Essential Eight mitigation strategy for restricting execution to an organisation-approved set, expanding from workstation user profiles at ML1 to servers, drivers and vendor blocklists at higher levels.
Application control at Maturity Level One: application control on workstations, covering user profiles and temporary folders, restricting executables, libraries, scripts, installers and similar file types to an approved set.
Application control at Maturity Level Two: application control on internet-facing servers and across all file system locations, Microsoft's recommended blocklist, annual ruleset validation, and central logging of allowed and blocked events.
Application control at Maturity Level Three: application control on non-internet-facing servers, driver execution restricted to an approved set, and Microsoft's vulnerable driver blocklist.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.