Windows Defender Application Control (Device Guard) in audit

Learn how to use Windows Defender Application Control (Device Guard) in audit mode to supplement detections and threat hunting. One valuable use case includes suspicious driver load insight. https://t.co/Vza35tnoXZ

— SpecterOps (@SpecterOps) June 26, 2018