Skip to content

Latest commit

 

History

History
19 lines (12 loc) · 374 Bytes

File metadata and controls

19 lines (12 loc) · 374 Bytes

Applocker parser

Parse gpohound output for AppLocker policies. For each of these policies, extract the XML contents from the registry values in the GPO.

Usage

Run gpohound to obtain JSON output:

gpohound dump --json 2> gpohound_dump.json

Then run this parser:

python parse.py gpohound_dump.json