[Suggestion]: WDAC Reporting dashboard

[Marshyp]

Are you sure the Security measure is not already implemented?

• Yes, I have checked and the Security measure I'm suggesting to be implemented is not duplicate. 🫡

Please explain your new Security measure suggestion

It would be good to have a section in the tool for reporting, with the ability to filter time range. I’d like to see reports on the top users triggering WDAC blocks, top files being blocked, common file type blocks, etc.
This could be used to formulate a report on files that weee missed, users that are trying to circumvent systems etc.

[Marshyp]

Apologies for the delays in updating this one @HotCakeX

Further to our recent discussion, I think having a simplistic dashboard on the application under the MDE page might be beneficial. For what it's worth, I built this using LogicApps in our tenancy:

I reckon a high level "Top blocked user, Top Blocked App, Top blocked file type (incase anything jumps out in terms of DLLs etc)" and a list of the blocks, with the ability to drill down further into each entry would be perfect.

Would potentially (but not a deal breaker) be good if we had an option to print to PDF also, so that we could (if needed) provide an easy executive summary?