Looks interesting, does this require defender to be running or is it like exploit protection where it is independent? Seems like a next gen applocker from reading up on it. Something to play around with in VMs. I think they need to mark the filename, what version it is, and publish a changelog, and make all versions downloadable. My filename unlike everyone else has no version info on it, it is just InstallWDACLockdown.exe