Product
Windows Defender Application Control
- First Reported
- Dec 19, 2024
- Latest Reported
- Jul 15, 2026
Reported Context (3)
- Block Unsigned Executables with Windows Defender Application Control Windows Lab Shows Local Privilege Escalation Through Misassigned SeTcbPrivilege
- Disable mshta.exe via AppLocker GPO or Windows Defender Application Control (WDAC):C:\Windows\System32\mshta.exe Amatera Stealer Adds Evasion Features and Expands Credential and Wallet Theft
- vulnerable drivers to tackle this issue. At the beginning, the list was included into the Windows Defender Application Control feature and was superseded by the Windows Security application in newer Windows versions. How Threat Actors Exploit Vulnerable Windows Drivers in BYOVD Attacks
CVE (2)
Malware (9)
People (11)
Threat Actors (6)
MITRE ATT&CK (9)
Vendors (11)
Products (21)
Tools (12)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.