mirror of
https://github.com/okieselbach/AutopilotMonitor.git
synced 2026-10-25 05:00:07 +00:00
Remove 5 irrelevant entries from AppX whitelist
Removed packages that don't belong in the AppX filter: - Microsoft.ManagementApp (IME is Win32, not AppX) - Microsoft.MicrosoftOfficeHub (just a launcher, no attack surface) - Microsoft.PowerBIDesktop (deployed as Win32, not AppX) - Microsoft.SecHealthUI (UI shell only, Defender version from other sources) - Microsoft.OneDriveSync (normal Win32 app, not AppX) https://claude.ai/code/session_01CnCJ28kuJcrWtQZcX4kCAw
This commit is contained in:
-7
@@ -304,14 +304,12 @@ namespace AutopilotMonitor.Agent.Core.Monitoring.Analyzers
|
||||
{
|
||||
// Intune / device management
|
||||
"Microsoft.CompanyPortal",
|
||||
"Microsoft.ManagementApp",
|
||||
|
||||
// Communication & productivity (CVE-relevant, enterprise-deployed)
|
||||
"Microsoft.Teams",
|
||||
"MSTeams",
|
||||
"MicrosoftTeams",
|
||||
"Microsoft.Office.Desktop",
|
||||
"Microsoft.MicrosoftOfficeHub",
|
||||
"Microsoft.OutlookForWindows",
|
||||
|
||||
// Remote access (security surface)
|
||||
@@ -324,11 +322,6 @@ namespace AutopilotMonitor.Agent.Core.Monitoring.Analyzers
|
||||
|
||||
// Power Platform (enterprise)
|
||||
"Microsoft.PowerAutomateDesktop",
|
||||
"Microsoft.PowerBIDesktop",
|
||||
|
||||
// Security-relevant Microsoft apps
|
||||
"Microsoft.SecHealthUI", // Windows Security app
|
||||
"Microsoft.OneDriveSync",
|
||||
};
|
||||
|
||||
// Pattern: {Publisher.PackageName}_{Version}_{Arch}__{PublisherHash}
|
||||
|
||||
Reference in New Issue
Block a user