[Suggestion] Some GUI improvement suggestions

[archeedev]

hi Violet,

using more and more the App Control Manager I notice the I am continuously looking for the features where they are not - so need to rescan the whole screen each time to find the button/feature I need (and I use them often).
It would be helpful to have the interface a bit simplified - some features are used (much) more frequently than other.

I'll list my suggestions here (can split if needed) - could you please add the following options:

1. Open the Even Viewer at CodeIntegrity node - from: Create policy from Event Logs

2. ...optionally filter the event logs view to: errors only, last hour

3. Button to clear the log: CodeIntegrity (in: Create policy from Event Logs)

4. Change the display order in the menu - I am using those a lot and having them on top
   (or in different, more intuitive place)
   would be very helpful

a. Info Gathering > System Information
b. Logs Processing > Create policy from Event Logs
c. Merge / Deploy policy

Other options I use rather rarely.

5. Allow to reorder and/or hide/remove columns - all those flavors of hashes and attributes are not that helpful for everyday use - sometimes yes, but not always - a lot of horizontal scrolling (and the app does not support WSAD 😄 ) especially in:
   a. System Information
   b. Create policy from Event Logs

[HotCakeX]

Hi,
Thanks for the suggestions, i have a couple of follow up questions to understand it better

Do you want to use the WASD buttons for horizontal/scrolling in pages?

Open the Even Viewer at CodeIntegrity node - from: Create policy from Event Logs

Do you mean you want a button in the Create policy from Event Logs page to open the Windows Event Viewer's program?

...optionally filter the event logs view to: errors only, last hour

I can add hours/minutes as filter but what do you mean by errors only? The event types displayed at the moment are either blocked or audit events because they have the necessary info to create a policy. There are error events for Code Integrity too but not currently listed by the app, do you want them in the app too even if they might not be used to create policy?

Button to clear the log: CodeIntegrity (in: Create policy from Event Logs)

There is a Clear Data option under the Actions button in the Create policy from Event Logs page. Have you tried it?

I need a better explanation of how you want the menu items to be ordered because it's not clear to me. Maybe take a screenshot of the app and draw arrows on it for items you want relocated.

[archeedev]

Do you want to use the WASD buttons for horizontal/scrolling in pages?

I would like to have an option to hide/remove columns
(maybe also to reset the layout to default settings)

WSAD (I just noticed) is not needed as you can scroll the grid horizontally with cursor keys.

It is about more real estate with meaningful info.
I either work on laptop or (at work) on horizontally wide but vertically very narrow monitor so this can be my specific request.

Open the Even Viewer at CodeIntegrity node - from: Create policy from Event Logs

Do you mean you want a button in the Create policy from Event Logs page to open the Windows Event Viewer's program?

Yes, with focus on the CodeIntegrity node.
Perhaps this sounds useless but this would (I hope) allow me to have less UAC prompts + Event Viewer takes time to open/refresh/find the node/etc.

I think ACM filters certain Event IDs only.
I do not yet fully understand some of the WDAC error types and I see a lot of them which I am not yet sure what to do with (whitelist, ignore, etc. - eg. ID 3114 and more)

Event Viewer allows me to see more.

...optionally filter the event logs view to: errors only, last hour

I can add hours/minutes as filter but what do you mean by errors only? The event types displayed at the moment are either blocked or audit events because they have the necessary info to create a policy. There are error events for Code Integrity too but not currently listed by the app, do you want them in the app too even if they might not be used to create policy?

Button to clear the log: CodeIntegrity (in: Create policy from Event Logs)

There is a Clear Data option under the Actions button in the Create policy from Event Logs page. Have you tried it?

I need a better explanation of how you want the menu items to be ordered because it's not clear to me. Maybe take a screenshot of the app and draw arrows on it for items you want relocated.

Yes I know it.
That button only wipes the grid.
If you re-Scan Logs all the events come back.

This is perhaps me not doing things in the best or recommended way.
I find it helpful to clean (EV log) & rescan (ACM) to isolate events from specific processes.

[HotCakeX]

I just released an update that partially completes this issue: https://github.com/HotCakeX/Harden-Windows-Security/releases/tag/AppControlManager-v2.0.50.0

the top area is now adaptive and responsive to width changes and automatically collapses itself to a flyout when too small width.