Remove 5 irrelevant entries from AppX whitelist

Removed packages that don't belong in the AppX filter:
- Microsoft.ManagementApp (IME is Win32, not AppX)
- Microsoft.MicrosoftOfficeHub (just a launcher, no attack surface)
- Microsoft.PowerBIDesktop (deployed as Win32, not AppX)
- Microsoft.SecHealthUI (UI shell only, Defender version from other sources)
- Microsoft.OneDriveSync (normal Win32 app, not AppX)

https://claude.ai/code/session_01CnCJ28kuJcrWtQZcX4kCAw
This commit is contained in:
Claude
2026-03-21 18:09:38 +00:00
parent fd00d976dc
commit ea2d907616
@@ -304,14 +304,12 @@ namespace AutopilotMonitor.Agent.Core.Monitoring.Analyzers
{
// Intune / device management
"Microsoft.CompanyPortal",
"Microsoft.ManagementApp",
// Communication & productivity (CVE-relevant, enterprise-deployed)
"Microsoft.Teams",
"MSTeams",
"MicrosoftTeams",
"Microsoft.Office.Desktop",
"Microsoft.MicrosoftOfficeHub",
"Microsoft.OutlookForWindows",
// Remote access (security surface)
@@ -324,11 +322,6 @@ namespace AutopilotMonitor.Agent.Core.Monitoring.Analyzers
// Power Platform (enterprise)
"Microsoft.PowerAutomateDesktop",
"Microsoft.PowerBIDesktop",
// Security-relevant Microsoft apps
"Microsoft.SecHealthUI", // Windows Security app
"Microsoft.OneDriveSync",
};
// Pattern: {Publisher.PackageName}_{Version}_{Arch}__{PublisherHash}