Third Party Execution
As previously stated, AppLocker only enforces rules against
native Windows executable data file types.
If a third-party scripting engine like Python or Perl
is installed, we could use it to very easily bypass
application whitelisting.
To demonstrate this, we’ll create a small Python script,
and execute it:
The output shows that AppLocker may easily be bypassed
through a third-party scripting engine,
but of course, it must be previously installed,
which is rare in most traditional environments.