Detection rules › Sigma
Deployment AppX Package Was Blocked By AppLocker
Detects an appx package deployment that was blocked by AppLocker policy.
Event coverage
| Provider | Event ID | Title |
|---|---|---|
| AppXDeployment-Server | 412 | error ErrorCode: Deployment of package PackageFullName was blocked by AppLocker. |