applocker.yml

name: AppLocker
id: b13032c2-f0e2-48ee-8a85-ded8956c012a
version: 2
creation_date: '2024-08-07'
modification_date: '2026-05-13'
author: Michael Haag, Splunk
description: Utilize this dashboard to assist with auditing and monitoring Windows AppLocker events for your endpoints. Configure the applocker macro to use the AppLocker data source for populating the dashboard.