Device Guard

https://blog.engineer-memo.com/2016/02/25/windows-10-%E3%81%AE%E3%83%87%E3%83%90%E3%82%A4%E3%82%B9%E3%82%AC%E3%83%BC%E3%83%89%E3%81%A7%E6%9C%AA%E7%BD%B2%E5%90%8D%E3%81%AE%E3%82%A2%E3%83%97%E3%83%AA%E3%82%B1%E3%83%BC%E3%82%B7%E3%83%A7-2/

https://blog.engineer-memo.com/2016/02/27/windows-10-%E3%81%AE%E3%83%87%E3%83%90%E3%82%A4%E3%82%B9%E3%82%AC%E3%83%BC%E3%83%89%E3%81%A7%E6%9C%AA%E7%BD%B2%E5%90%8D%E3%81%AE%E3%82%A2%E3%83%97%E3%83%AA%E3%82%B1%E3%83%BC%E3%82%B7%E3%83%A7-3/

https://blog.engineer-memo.com/2016/01/30/windows-10-%E3%81%AE%E3%83%87%E3%83%90%E3%82%A4%E3%82%B9%E3%82%AC%E3%83%BC%E3%83%89%E3%81%AB%E3%81%A4%E3%81%84%E3%81%A6%E3%81%AE%E6%95%B4%E7%90%86/

device guard 署名ツール

https://docs.microsoft.com/ja-jp/microsoft-store/device-guard-signing-portal

https://docs.microsoft.com/ja-jp/sccm/protect/deploy-use/use-device-guard-with-configuration-manager

https://docs.microsoft.com/ja-jp/microsoft-store/sign-code-integrity-policy-with-device-guard-signing

https://blog.engineer-memo.com/2016/02/25/windows-10-%E3%81%AE%E3%83%87%E3%83%90%E3%82%A4%E3%82%B9%E3%82%AC%E3%83%BC%E3%83%89%E3%81%A7%E6%9C%AA%E7%BD%B2%E5%90%8D%E3%81%AE%E3%82%A2%E3%83%97%E3%83%AA%E3%82%B1%E3%83%BC%E3%82%B7%E3%83%A7%E3%83%B3/

New-CIPolicy diff update

https://docs.microsoft.com/ja-jp/windows/security/threat-protection/windows-defender-application-control/select-types-of-rules-to-create

https://blog.engineer-memo.com/2016/01/30/windows-10-%E3%81%AE%E3%83%87%E3%83%90%E3%82%A4%E3%82%B9%E3%82%AC%E3%83%BC%E3%83%89%E3%81%AB%E3%81%A4%E3%81%84%E3%81%A6%E3%81%AE%E6%95%B4%E7%90%86/

整合性ポリシー 差分 更新