Allow-listing (aka Whitelisting) - Implementing Easy to Manage AppLocker (or other Allow-listing solutions) in an Enterprise

Allow-listing (aka Whitelisting) ehk Lubatud toimingute loendisse lisamine on küberturbe strateegia, mille kohaselt saab kasutaja oma arvutis teha ainult selliseid toiminguid, mida administraator on selleks eelnevalt selgesõnaliselt lubanud. Selle asemel, et pidevalt küberründajatest püüda olla samm eespool ja nende „pahatahtlikke“ koode tuvastada ja blokeerida, koostavad IT-töötajad hoopis loetelu heakskiidetud rakendustest, millele arvuti või mobiilseade juurde pääseb. Sisuliselt on kasutajal juurdepääs ainult piiratud kogusele funktsionaalsustele, mida administraator märkinud „ ohutuks“. Lubatud toimingute loendisse lisamine on üsna äärmuslik lukustamismeede, mis korraliku rakendamise korral hoiab aga paljud küberturbe probleemid eemal!

Join this workshop, where one of the leading experts in Windows OS and Security, Sami Laiho, shows you how to effectively and securely deploy AppLocker in your environment.

Technical professionals (Junior and up) or project managers responsible of security projects.

Basic knowledge of Windows Operating System, Networks and Active Directory.

Module 1: Allow-listing (aka Whitelisting) in General Different allow-listing (aka whitelisting) options in Windows Allow-listing (aka Whitelisting) vs Deny-listing (aka BlackListing) AppLocker basics Windows Defender Application Control? Module 2: Implementing AppLocker How to run an AppLocker project Logging what apps a company has Module 3: Managing AppLocker Using GUI and PowerShell to add trusted apps Using correct rule types Getting from thousands of rules to just tens Keeping AppLocker safe – fighting against LOLBins Module 4: Troubleshooting AppLocker Bypassing AppLocker What fails with enterprise implementation of allow-listing (aka whitelisting)

The prerequisite for issuing the certificate is full participation in training.

The training price also includes: study materials; a trainer's consultation on the topics learned by e-mail after the training; certificate.