<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Wdac on Ben Wildman</title><link>https://ben.thewildmans.co.uk/tags/wdac/</link><description>Recent content in Wdac on Ben Wildman</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Mon, 09 Mar 2026 15:53:02 +0000</lastBuildDate><atom:link href="https://ben.thewildmans.co.uk/tags/wdac/index.xml" rel="self" type="application/rss+xml"/><item><title>Blocking ClickFix attacks with layered Intune policies</title><link>https://ben.thewildmans.co.uk/posts/blocking-clickfix-attacks-with-layered-intune-policies/</link><pubDate>Fri, 06 Mar 2026 00:00:00 +0000</pubDate><guid>https://ben.thewildmans.co.uk/posts/blocking-clickfix-attacks-with-layered-intune-policies/</guid><description>ClickFix campaigns trick users into running attacker commands via Windows Terminal. A layered Intune approach using Settings Catalog, ASR rules, and WDAC with an audit-first deployment workflow.</description></item></channel></rss>