| Action | User | Name | Rule Type | Exceptions |
| Deny | Everyone | C:\Windows\System32\*.msc | Path | No |
| Deny | Everyone | C:\Windows\System32\eventvwr.exe | Path | No |
| Deny | Everyone | C:\Windows\System32\appwiz.cpl | Path | No |
| Allow | Everyone | C:\Desktop Integration Siebel Agent 21.5.0\* | Path | No |
| Deny | Everyone | C:\Users\*\AppData\Local\Viber\Viber.exe | Path | No |
| Deny | Everyone | C:\Windows\System32\en-US\*.msc | Path | No |
| Allow | EMEA\XK-G-ORG-Delegation Local Administration Rights Tier2 | * | Path | No |
| Allow | Everyone | %OSDRIVE%\OneRes\* | Path | No |
| Allow | Everyone | C:\Users\*\AppData\Loca\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Roaming\Microsoft\Teams\current\Teams.exe | Path | No |
| Allow | NT AUTHORITY\NETWORK SERVICE | * | Path | No |
| Allow | EMEA\XK-G-ORG-Delegation Local Administration Rights Tier2 | C:\Program Files (x86)\WinPcap\* | Path | No |
| Deny | Everyone | C:\Program Files\FileZilla FTP Client\filezilla.exe | Path | No |
| Allow | Everyone | C:\Users\*\AppData\Local\Microsoft\Teams\*\Teams.exe | Path | No |
| Allow | Everyone | C:\ResponseClientINT\* | Path | No |
| Allow | NT AUTHORITY\LOCAL SERVICE | * | Path | No |
| Allow | EMEA\XK-G-ORG-Servicedesk Admins | C:\Program Files (x86)\WinPcap\* | Path | No |
| Deny | Everyone | C:\Program Files (x86)\Lightshot\Lightshot.exe | Path | No |
| Allow | NT AUTHORITY\SYSTEM | * | Path | No |
| Allow | Everyone | C:\ResponseClient\* | Path | No |
| Deny | Everyone | C:\Program Files (x86)\WinPcap\* | Path | No |
| Allow | Everyone | %PROGRAMFILES%\* | Path | No |
| Allow | EMEA\XKPRN-G-ORG-Hewlett-Packard ACM | C:\Users\*\AppData\Roaming\Zoom\bin\Zoom.exe | Path | No |
| Deny | Everyone | C:\Program Files\PowerShell*\pwsh.exe | Path | No |
| Deny | Everyone | * | Path | No |
| Deny | Everyone | C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3.exe | Path | No |
| Allow | EMEA\XKPRN-G-ORG-Sky CCAdmin | C:\Program Files\FileZilla FTP Client\filezilla.exe | Path | No |
| Allow | Everyone | %OSDRIVE%\WinAuth\* | Path | No |
| Deny | Everyone | %SYSTEM32%\WindowsPowerShell\v1.0\powershell_ise.exe | Path | No |
| Deny | Everyone | C:\Users\*\AppData\Roaming\Zoom\bin\Zoom.exe | Path | No |
| Allow | Everyone | C:\ResponseClientProd\* | Path | No |
| Deny | Everyone | C:\Windows\System32\services.exe | Path | No |
| Allow | Everyone | %OSDRIVE%\Softphone\* | Path | No |
| Deny | Everyone | C:\Users\*\AppData\Local\Discord\app-*\Discord.exe | Path | No |
| Allow | EMEA\XK-G-ORG-Delegation Local Administration Rights Tier2 | * | Path | No |
| Allow | Everyone | (Default Rule) All files located in the Program Files folder | Path | No |
| Allow | EMEA\XKPRN-G-ORG-Hewlett-Packard QA | C:\Users\*\AppData\Roaming\Zoom\bin\Zoom.exe | Path | No |
| Deny | Everyone | %SYSTEM32%\cmd.exe | Path | No |
| Deny | Everyone | %SYSTEM32%\WindowsPowerShell\v1.0\powershell.exe | Path | No |
| Allow | EMEA\XKPRN-G-ORG-Sky CCM | C:\Program Files\FileZilla FTP Client\filezilla.exe | Path | No |
| Deny | Everyone | %SYSTEM32%\WindowsPowerShell\v1.0\powershell_ise.exe | Path | No |
| Allow | Everyone | (Default Rule) All files located in the Windows folder | Path | No |
| Allow | Everyone | C:\Users\*\Downloads\*.exe | Path | No |
| Allow | Everyone | %PROGRAMFILES%\* | Path | No |
| Allow | EMEA\XKPRN-G-ORG-Sky ACM | C:\Program Files\FileZilla FTP Client\filezilla.exe | Path | No |
| Allow | EMEA\XKPRN-G-ORG-Hewlett-Packard Supervisor | C:\Users\*\AppData\Roaming\Zoom\bin\Zoom.exe | Path | No |
| Deny | Everyone | %SYSTEM32%\mmc.exe | Path | No |
| Deny | Everyone | %SYSTEM32%\notepad.exe | Path | No |
| Deny | Everyone | C:\Users\*\AppData\Roaming\Zoom\bin\Zoom.exe | Path | No |
| Allow | Everyone | C:\Users\*\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Roaming\Microsoft\Teams\*\Teams.exe | Path | No |
| Allow | Everyone | C:\DISA\* | Path | No |
| Allow | Everyone | \\emea.tpg.ads\xk\Pristina\Clients\*\Agent\Downloads\*.exe | Path | No |
| Allow | Everyone | \\emea.tpg.ads\xk\Pristina\Clients\*\Agent\Download\*.exe | Path | No |
| Deny | Everyone | C:\Users\*\AppData\Local\slack\slack.exe | Path | No |
| Deny | Everyone | %SYSTEM32%\WindowsPowerShell\v1.0\powershell.exe | Path | No |
| Allow | BUILTIN\Administrators | (Default Rule) All files | Path | No |
| Allow | Everyone | TPNotes.exe | Hash | No |