Why not SiPolicy.p7b to xml, then edit sign in xml,last use https://aka.ms/refreshpolicy refresh it. https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/design/microsoft-recommended-driver-block-rules
