Identity & Endpoint

Endpoints & Devices

Posture, hardened baselines with hourly drift repair, EDR, default-deny application control and patch rings

Mode

Default deny

only approved software runs

Approved applications

1,912

by signer and hash

Requests waiting

median decision 14 min

Blocked executions · 7 d

2,410

USB, downloads, scripts

Requests

Request	Application	Signer	Scope	Containment	Requested by	Status
AC-911	Wireshark 4.4	Wireshark Foundation	Security operations group	No file shares	I•••• K••••	Pending
AC-910	Python 3.13	Python Software Foundation	Single device	No internet	S•••• A••••	Pending
AC-908	AnyDesk	philandro	Single device	—	V••••• s•••••	Denied

Containment policies

Policy	Application	Can not	Applies to	Status
CT-01	Office apps	Start PowerShell, cmd or scripts	All workstations	Enforced
CT-02	PowerShell	Reach the internet	All workstations	Enforced
CT-03	Browsers	Read the evidence vault	All workstations	Enforced
CT-04	USB storage	Mount, except encrypted approved keys	All devices	Enforced