AppControl Manager v2.0.25.0

[HotCakeX]

• Introduced a tailor-made policy to block Remote Management and Monitoring software, mitigating the recent surge in RMM-based attacks. This policy prevents execution of known RMM tools and thwarts unauthorized remote access. Administrators may enable, disable or deploy it in Audit mode to monitor activity within the network. It covers an extensive catalog of executables by filename and directory path—regardless of drive letter—and can be extended by submitting additional entries via GitHub Issues.

• Updated the View File Certificates feature to function without Administrator privileges.

• Added a modern Windows 11–style "AppControl Manager" entry to the File Explorer right-click (or tap-and-hold) interface, granting instant access to certificate inspection, hash calculation, and direct launching of XML/CIP files in the Policy Editor. Future enhancements will include folder-wide block actions, all implemented with high-performance code to eliminate any delay in the context menu.

• Enhanced the View File Certificates page with an informative banner that displays essential metadata for the file under inspection.

• Shrunk the MSIXBundle footprint by leveraging an architecture-aware build pipeline, resulting in a leaner app package.

[Copilot]

Pull Request Overview

This PR adds a new RMM blocking policy, enhances file‐certificate inspection without admin rights, and integrates an Explorer context‐menu entry, while updating versioning and build artifacts.

• Introduce BuildRMMBlocking in BasePolicyCreator to block known RMM tools with audit/deploy options
• Migrate certificate‐view copy handlers to ViewModel, disable navigation cache, and enable context‐menu launch
• Update manifest and workflow to add Explorer integration, bump version to 2.0.25.0, and streamline MSIXBundle packaging

Reviewed Changes

Copilot reviewed 49 out of 49 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
Pages/ViewFileCertificates.xaml.cs	Disabled navigation cache; moved copy logic into ViewModel
Pages/ViewFileCertificates.xaml	Swapped code‐behind handlers for VM bindings; added enable flags
Main/BasePolicyCreator.cs	Added BuildRMMBlocking for policy generation
Package.appxmanifest	Bumped version; added fileExplorerContextMenus and COM server
AppSettings/Main.cs	Added settings for context‐menu launch args
.github/workflows/Build AppControl Manager MSIX Package.yml	Removed MSIX upload, adjusted artifact steps, made build script more modular
AppControl Manager.csproj	Bumped FileVersion; disabled documentation file generation; updated interop references

Comments suppressed due to low confidence (5)

.github/workflows/Build AppControl Manager MSIX Package.yml:18

• [nitpick] The MSIX_PATH output and its upload step were removed, which could confuse users expecting the .msix artifact. If retaining the .msix is required, re-add the outputs and upload-artifact step or document the change.

-      MSIX_PATH: ${{ steps.main_buildOp.outputs.MSIX_PATH }}

AppControl Manager/Pages/CreatePolicy.xaml:380

• The new RMM Blocking expander lacks automation properties (e.g., AutomationProperties.Name) for screen-reader support. Consider adding accessible labels or tooltips.

<controls:SettingsExpander IsExpanded="{x:Bind ViewModel.RMMBlockingSettingsIsExpanded, Mode=TwoWay" x:Uid="RMMBlockingSection" HeaderIcon="{ui:FontIcon Glyph=&#xEA14;}">

AppControl Manager/Others/GlobalVars.cs:117

• By collapsing architecture-specific executables into a single name, the wrong binary may be invoked on ARM64. Consider preserving the RuntimeInformation-based selection or verifying the generic executable exists for all architectures.

internal static readonly string DeviceGuardWMIRetrieverProcessPath = Path.Combine(RustInteropPath, "DeviceGuardWMIRetriever.exe");

AppControl Manager/AppControl Manager.csproj:193

• [nitpick] Disabling XML documentation file generation may impact API consumers who rely on generated docs. Confirm that this change is intentional or re-enable <GenerateDocumentationFile>true</GenerateDocumentationFile>.

<GenerateDocumentationFile>false</GenerateDocumentationFile>

AppControl Manager/Pages/ViewFileCertificates.xaml.cs:49

• [nitpick] Disabling navigation cache will cause the page to reinitialize each time and lose scroll or filter state. Verify that this aligns with the intended user experience.

this.NavigationCacheMode = NavigationCacheMode.Disabled;