From f7bd0cd3fe99c9e579422bc386c554914b29cb25 Mon Sep 17 00:00:00 2001 From: NikCharlebois Date: Thu, 4 Jul 2024 11:20:50 +0000 Subject: [PATCH] Updated Schema Definition --- Modules/Microsoft365DSC/SchemaDefinition.json | 90 +++++++++++++++++++ 1 file changed, 90 insertions(+) diff --git a/Modules/Microsoft365DSC/SchemaDefinition.json b/Modules/Microsoft365DSC/SchemaDefinition.json index b849b82dc7..cc4e3f0fe7 100644 --- a/Modules/Microsoft365DSC/SchemaDefinition.json +++ b/Modules/Microsoft365DSC/SchemaDefinition.json @@ -30272,56 +30272,111 @@ "Name": "BlockAbuseOfExploitedVulnerableSignedDrivers", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockAbuseOfExploitedVulnerableSignedDrivers_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "BlockAdobeReaderFromCreatingChildProcesses", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockAdobeReaderFromCreatingChildProcesses_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "BlockAllOfficeApplicationsFromCreatingChildProcesses", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockAllOfficeApplicationsFromCreatingChildProcesses_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "BlockCredentialStealingFromWindowsLocalSecurityAuthoritySubsystem", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockCredentialStealingFromWindowsLocalSecurityAuthoritySubsystem_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "BlockExecutableContentFromEmailClientAndWebmail", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockExecutableContentFromEmailClientAndWebmail_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "BlockExecutableFilesRunningUnlessTheyMeetPrevalenceAgeTrustedListCriterion", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockExecutableFilesRunningUnlessTheyMeetPrevalenceAgeTrustedListCriterion_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "BlockExecutionOfPotentiallyObfuscatedScripts", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockExecutionOfPotentiallyObfuscatedScripts_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "BlockJavaScriptOrVBScriptFromLaunchingDownloadedExecutableContent", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockJavaScriptOrVBScriptFromLaunchingDownloadedExecutableContent_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "BlockOfficeApplicationsFromCreatingExecutableContent", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockOfficeApplicationsFromCreatingExecutableContent_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "BlockOfficeApplicationsFromInjectingCodeIntoOtherProcesses", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockOfficeApplicationsFromInjectingCodeIntoOtherProcesses_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "BlockOfficeCommunicationAppFromCreatingChildProcesses", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockOfficeCommunicationAppFromCreatingChildProcesses_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "BlockPersistenceThroughWMIEventSubscription", @@ -30332,36 +30387,71 @@ "Name": "BlockProcessCreationsFromPSExecAndWMICommands", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockProcessCreationsFromPSExecAndWMICommands_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "BlockRebootingMachineInSafeMode", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockRebootingMachineInSafeMode_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "BlockUntrustedUnsignedProcessesThatRunFromUSB", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockUntrustedUnsignedProcessesThatRunFromUSB_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "BlockUseOfCopiedOrImpersonatedSystemTools", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockUseOfCopiedOrImpersonatedSystemTools_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "BlockWebShellCreationForServers", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockWebshellCreationForServers_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "BlockWin32APICallsFromOfficeMacros", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "BlockWin32APICallsFromOfficeMacros_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String", "Name": "UseAdvancedProtectionAgainstRansomware", "Option": "Write" }, + { + "CIMType": "String[]", + "Name": "UseAdvancedProtectionAgainstRansomware_ASROnlyPerRuleExclusions", + "Option": "Write" + }, { "CIMType": "String[]", "Name": "ControlledFolderAccessProtectedFolders",