CmdID / PowerShell / Cmdlets / New
New-CIPolicy
Creates a Code Integrity policy as an .xml file. Windows Server PowerShell reference
From the Windows Server PowerShell reference 21 parameters Its page in the reference
Parameters
Show its 21 parameters
-AllowFileNameFallbacksIndicates that files that do not have an OriginalFileName fall back in the following order:-AppIdTaggingKeyThis parameter is reserved for future use.-AppIdTaggingPolicyThis parameter is reserved for future use.-AppIdTaggingValueThis parameter is reserved for future use.-Audit, -aIndicates that this cmdlet searches the Code Integrity Audit log for drivers.-Deny, -dIndicates that this cmdlet creates deny rules instead of the default allow rules.-DriverFiles, -dfSpecifies an array of DriverFile objects on which this cmdlet bases rules.-FallbackSpecifies an array of levels of detail for generated rules.-FilePath, -fSpecifies the path for the Code Integrity policy .xml file.-Level, -lSpecifies the primary level of detail for generated rules.-MultiplePolicyFormatIndicates that this cmdlet should create a policy in multiple policy format as opposed to a single policy format.-NoScriptIndicates that this cmdlet does not search script files.-NoShadowCopyIndicates that the Volume Snapshot Service (VSS) does not make a shadow copy of the disk while the scan runs.-OmitPaths, -oSpecifies an array of paths that this cmdlet omits from the search.-PathToCatroot, -cSpecifies the path of the CatRoot folder.-Rules, -rSpecifies an array of Rule objects that this cmdlet includes in the policy.-ScanPath, -sSpecifies the path for this cmdlet to scan.-ScriptFileNamesThis parameter is reserved for internal Microsoft use.-SpecificFileNameLevelSpecifies the attribute of the file off which to base a file name rule.-UserPEs, -uIndicates that this cmdlet includes user-mode files in the scan.-UserWriteablePathsIndicates that this cmdlet includes files identified as user writeable in the policy.