Individual skill
implementing-application-whitelisting-with-applocker
Implements application whitelisting using Windows AppLocker to restrict unauthorized software execution on endpoints, reducing attack surface from malware, unauthorized tools, and shadow IT. Use when enforcing application control policies, meeting compliance requirements for software restriction, or preventing execution of unsigned or untrusted binaries. Activates for requests involving AppLocker, application whitelisting, software restriction, or executable control.
skills/implementing-application-whitelisting-with-applocker/SKILL.md
Source commit 54a798831d2266a3ca61ce68a7acb80b81160d57
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 9, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 35,881
- Repository last updated
- Aug 31, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- ai-agents Repository topic
- claude-code Repository topic
- cybersecurity Repository topic
- incident-response Repository topic
- mitre-attack Repository topic
- penetration-testing Repository topic
- red-team Repository topic
- security Repository topic
- cloud-security Repository topic
- malware-analysis Repository topic
- endpoint Declared skill tag
- applocker Declared skill tag
- application-whitelisting Declared skill tag
- windows-security Declared skill tag
- software-restriction Declared skill tag
- engineering Derived category
- legal Derived category
- security Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
LICENSEasset · 11,255 bytesSKILL.mdcore · 10,482 bytesSKILL.mdcore · 10,482 bytesSKILL.mdcore · 10,482 bytesSKILL.mdcore · 10,482 bytesSKILL.mdcore · 10,482 bytesSKILL.mdcore · 10,482 bytesSKILL.mdcore · 10,482 bytesSKILL.mdcore · 10,482 bytesassets/template.mddoc · 2,796 bytesreferences/api-reference.mddoc · 1,586 bytesreferences/standards.mddoc · 2,882 bytesreferences/workflows.mddoc · 3,942 bytesscripts/agent.pyruns · 7,318 bytesscripts/process.pyruns · 9,275 bytes
Read excerpt
# Implementing Application Whitelisting with AppLocker
## When to Use
Use this skill when:
- Implementing application control to prevent unauthorized software execution on Windows endpoints
- Meeting compliance requirements (PCI DSS 6.4.3, NIST 800-53 CM-7, ACSC Essential Eight)
- Blocking common attack vectors: living-off-the-land binaries (LOLBins), script-based attacks, unauthorized admin tools
- Restricting software installation in kiosk, POS, or high-security environments
**Do not use** this skill for macOS/Linux application control (use OS-native tools like Gatekeeper or AppArmor) or for enterprise-grade WDAC (Windows Defender Application Control) deployments.
## Prerequisites
- Windows 10/11 Enterprise or Education, or Windows Server 2016+