AaronLocker/Support/DownloadAccesschk.ps1 (4 lines): - line 5: TODO: Maybe add an optional target directory. - line 6: TODO: Maybe add a required -AcceptEula switch - line 14: #TODO: Verify that Invoke-Request succeeded. - line 16: #TODO: Set the LastWriteTime to match (might need to copy from UNC path instead of https to get that) AaronLocker/Support/Create-Policies-AppLocker.ps1 (2 lines): - line 7: TODO: Find and remove redundant rules. Report stripped rules to a separate log file. - line 678: #TODO: Optimize rules in rule collections here - combine/remove redundant/overlapping rules AaronLocker/Create-Policies.ps1 (2 lines): - line 6: TODO: Find and remove redundant rules. Report stripped rules to a separate log file. - line 201: # TODO (one day When WDAC adds exception support, we can allow AppLocker-style rules including exceptions) AaronLocker/Compare-Policies.ps1 (2 lines): - line 5: TODO: Add an option to get policies from AD GPO. - line 330: # TODO: re-sort ruleDoco so that its items still correspond to the sorted ruleDetail - not just a simple alpha sort though. AaronLocker/Support/Create-Policies-WDAC.ps1 (2 lines): - line 7: TODO: Find and remove redundant rules. Report stripped rules to a separate log file. - line 39: # TODO (one day When WDAC adds exception support, allow AppLocker-style rules) AaronLocker/Support/Enum-WritableDirs.ps1 (1 line): - line 185: #TODO: Detect and handle case where this cmdlet fails - disconnected and the admins group contains domain SIDs that can't be resolved. AaronLocker/Scan-Directories.ps1 (1 line): - line 93: #TODO: Need automation to turn selected results into rules. AaronLocker/Get-AppLockerEvents.ps1 (1 line): - line 651: #TODO: Verify that regional preferences don't interfere with making this useful... AaronLocker/ExportPolicy-ToExcel.ps1 (1 line): - line 49: #TODO: Add option to get AppLocker policy from AD GPO, if/when ExportPolicy-ToCsv.ps1 adds it. AaronLocker/Support/ExportPolicy-ToCsv.ps1 (1 line): - line 31: #TODO: Add option to get AppLocker policy from AD GPO AaronLocker/CustomizationInputs/GetSafePathsToAllow.ps1 (1 line): - line 23: TODO: At some point, reimplement with hashtable output supporting "label" and "RuleCollection" properties so that path rules have more descriptive names, and can be applied to specific rule collections. AaronLocker/Support/SupportFunctions.ps1 (1 line): - line 139: # TODO: Add support for more than 26 columns (e.g., AA1, AB1, AA2, ...)