A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses - View it on GitHub