This update fixes a bug causing Lockdown to not write additions to the Windows default list of executable file types, and as a result previous versions of Lockdown did not block a few scripting languages namely Powershell and Python. The list below shows what Windows considers an executable file type that is blocked by default (and by all versions of Lockdown):
WSC
VB
URL
SHS
SCR
REG
PIF
PCD
OCX
MST
MSP
MSI
MSC
MDE
MDB
LNK
ISP
INS
INF
HTA
HLP
EXE
CRT
CPL
COM
CMD
CHM
BAT
BAS
ADP
ADE
Lockdown v1.1.1 also adds these file types:
JS
JSE
PS1
PY
VBS
Please feel free to contact us to request additional file types to be added if we’ve left anything important out.
Leave a Reply