Viewing Application Control security events

Security events in the Event Viewer can be filtered to show only Application Control security events. Application control security events are events that were triggered on rules that are part of the Application Control policy. Such events do not necessarily mean that there was malicious activity but indicate an attempt to execute an application that is listed in the user-defined blocklist. These security events are displayed separately from other security events. Defining an exception for them can be done in a similar manner as for other security events. The exception specifies which applications are blocked by its hash.