Skip to content

Add DLL Hijack Prevention section and reorganize LPM Videos/KB structure#729

Open
jeremymoskowitz-netwrix wants to merge 10 commits intodevfrom
feature/rename-endpointpolicymanager-to-policypak
Open

Add DLL Hijack Prevention section and reorganize LPM Videos/KB structure#729
jeremymoskowitz-netwrix wants to merge 10 commits intodevfrom
feature/rename-endpointpolicymanager-to-policypak

Conversation

@jeremymoskowitz-netwrix
Copy link
Copy Markdown
Contributor

@jeremymoskowitz-netwrix jeremymoskowitz-netwrix commented Apr 8, 2026

Summary

  • Add new DLL Hijack Prevention video section with 4 new video articles
  • Add new Tips And DLL-Hijack Prevention KB section with overview article
  • Create SecureRun video section and consolidate 4 SecureRun-related videos into it
  • Reorder LPM Videos and Knowledge Base sidebar sections to match desired order
  • Rename "Netwrix Privilege Secure For Access Management" section to "PP Least Priv + Netwrix NPS"
  • Update all inbound links across affected files
  • Fix all editorial review issues from PR Add DLL Hijack Prevention section and reorganize LPM Videos/KB structure #724

Test plan

  • Verify DLL Hijack Prevention video section appears in LPM Videos sidebar
  • Verify SecureRun video section contains correct articles
  • Verify KB section order mirrors Videos order
  • Verify all internal links resolve correctly
  • Verify GPO screenshot renders in overview article

?? Generated with Claude Code

jeremymoskowitz-netwrix and others added 6 commits April 7, 2026 19:06
@jeremymoskowitz-netwrix @claude
Add DLL Hijack Prevention section and reorganize LPM Videos/KB structure
9a03404 
- Add new Tips And DLL-Hijack Prevention section under LPM Knowledge Base
- Add new DLL Hijack Prevention video section with 4 new video articles
- Create SecureRun video section and move 4 SecureRun-related videos into it
- Remove stopransomware article and clean up broken links
- Reorder LPM Videos sections to match desired sidebar order
- Reorder LPM Knowledge Base sections to mirror Videos order
- Rename "Netwrix Privilege Secure For Access Management" to "PP Least Priv + Netwrix NPS"
- Update all inbound links across 10+ files to reflect moved articles

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@github-actions @claude
docs: apply editorial fixes from PR review
1134cc0 
- overview.md: fix idiom, expand admin/system abbreviation, replace vague environment phrase, clarify Audit Mode, rewrite passive voice consideration, replace duplicate summary with forward reference
- basics.md: fix informal phrase, remove tagline
- installers.md: remove tagline
- poorlydesignedapps.md: remove marketing copy
- popups.md: fix sentence fragment, replace tagline with descriptive sentence
- setup.md: fix dangling "In addition" intro after content removal

Co-Authored-By: Claude <noreply@anthropic.com>
@github-actions @claude
docs: apply editorial fixes from PR 724 review
3fa8bbd 
- Remove informal "Actually" from heading in overview.md
- Fix logical inconsistency in three-condition summary
- Add Audit Mode introduction in Actions section of overview.md
- Fix passive voice in basics.md and installers.md
- Replace idiom "punch through" with "bypass" in installers.md
- Rewrite passive construction in poorlydesignedapps.md
- Replace colloquial "throwing" with "displaying" in popups.md

Co-Authored-By: Claude <noreply@anthropic.com>
@github-actions @claude
docs: apply editorial fixes from PR 724 review
6a1c209 
- overview.md: fold standalone caption sentence into paragraph; convert
  blockquote to :::note admonition; fix NOT → **not**; rename subheadings
  to "Purpose" / "Default behavior" for consistency; fix vague referent
  "This setting" → "The Approved Members list"; remove misplaced
  forward-reference at end of file
- basics.md: remove broken "Note, however..." transition; lead directly
  into authorization options
- popups.md: remove redundant sentence that restates the bullet list
- setup.md: remove "on this issue" and "please" from cross-reference

Co-Authored-By: Claude <noreply@anthropic.com>
@jeremymoskowitz-netwrix @claude
Fix editorial review issues in DLL Hijack Prevention articles
43a7475 
- overview.md: Add configuration pointer, forward-reference Approved Members,
  expand ACL acronym on first use
- basics.md: Fix sentence fragment on scenario intro
- installers.md: Remove dangling colon, use "intervenes" for clarity
- poorlydesignedapps.md: Replace idioms with precise language
- popups.md: Remove first-person from title/H1, rewrite bullet list as
  descriptive prose

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@jeremymoskowitz-netwrix @claude
Add GPO policy types screenshot to DLL Hijack Protection overview
20db13a 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@jeremymoskowitz-netwrix @claude
Fix editorial review issues from PR #729
3bade7b 
- overview.md: Remove redundant ## Overview heading, move Audit Mode out of
  Actions into its own section, rewrite risky DLL sentence, expand jargon
  in Known Considerations
- setup.md: Clarify ambiguous "It" pronoun
- poorlydesignedapps.md: Change "Scenario 2" to "Demo 2" to match heading
- installers.md: Replace "bypass the protection" with "Authorize...to perform
  installations"

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@jeremymoskowitz-netwrix @claude
Fix editorial review issues from PR #729 round 2
e5f2447 
- overview.md: Add GPO navigation path for enabling the feature, rename
  heading to noun phrase "What Makes a DLL Load Risky"
- installers.md: Clarify UAC prompt language, remove informal phrasing
- setup.md: Replace "all your apps" with "all your installed applications"

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@jeremymoskowitz-netwrix
Copy link
Copy Markdown
Contributor Author

jeremymoskowitz-netwrix commented Apr 8, 2026

@claude fix all problems

@github-actions @claude
docs: apply editorial fixes from PR 729 review
7158e78 
- tipsdllhijackprevention/overview.md: move enable procedure to dedicated
  numbered-step heading, remove all horizontal rule dividers, fix two
  "would-be" → "potential" instances, clarify ambiguous "Behavior" opener
- tipssecurerun/setup.md: clarify vague "Extras folder / Netwrix PolicyPak
  download" reference by adding "Netwrix customer portal"
- dllhijackprevention/basics.md: fix participial fragment after em dash
- dllhijackprevention/poorlydesignedapps.md: remove duplicate "Demo 2:"
  prefix from opening paragraph

Co-Authored-By: Claude <noreply@anthropic.com>
@jeremymoskowitz-netwrix
Copy link
Copy Markdown
Contributor Author

jeremymoskowitz-netwrix commented Apr 8, 2026

@claude fix all issues. But ignore the image path for the image because this particular repo doesnt use that structure. that is fine. Dont stop until you have literally zero things and we can move this document along.

@github-actions @claude
docs: apply editorial fixes from PR 729 review
a72980a 
- overview.md: rename heading to "How DLL Load Decisions Are Made", capitalize "Default Behavior" and "Use Cases", clarify enable procedure step 3, rewrite vague "misclassified" sentence
- setup.md: remove repeated "Auto Rules Generator tool" in consecutive sentences
- basics.md: replace "This scenario" with "This video", rewrite "demo shows" sentence for clarity
- installers.md: rewrite "This demo shows two ways to handle it" for clarity
- poorlydesignedapps.md: correct "DLL Hijack rule" to "DLL Hijack Protection rule"

Co-Authored-By: Claude <noreply@anthropic.com>
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 8, 2026

Documentation PR Review

Editorial Review

docs/policypak/components/leastprivilegemanager/manual/windows/automatic.md

No issues found. (Link update only.)

docs/policypak/components/leastprivilegemanager/manual/windows/overviewmisc/scopefilters/enhancedsecurerun.md

No issues found. (Link update only.)

docs/policypak/components/leastprivilegemanager/manual/windows/securerun/overview.md

No issues found. (Link updates only; preexisting issues not flagged.)

docs/policypak/components/leastprivilegemanager/technotes/implementationguide.md

No issues found. (Link updates only.)

docs/policypak/components/leastprivilegemanager/technotes/tipsdllhijackprevention/overview.md

  • Structure — Lines 21, 31, 46, 95, 119, 126, 137, 167, 176: Multiple section headings use title case throughout this new article, but Netwrix standards require sentence case for headings. Affected headings: "How DLL Load Decisions Are Made", "When the Policy Applies", "What Makes a DLL Load Risky", "Use Cases", "Logging Options", "How It Works", "Practical Examples", "Best Practices", "Known Considerations". Suggested fix: Lowercase the non-proper-noun words — e.g. "How DLL load decisions are made", "When the policy applies", "What makes a DLL load risky", "Use cases", "Logging options", "How it works", "Practical examples", "Best practices", "Known considerations".

  • Completeness — Line 16: Step 2 presents two policy types — "New Global DLL Hijack Protection Policy" and "New DLL Hijack Protection Exclusions Policy" — as an either/or choice with no guidance on which to choose. A reader configuring this for the first time has no basis for the decision. Suggested fix: Add a brief inline note, for example: "Select New Global DLL Hijack Protection Policy to create an enforcement rule, or New DLL Hijack Protection Exclusions Policy to define an exception."

  • Clarity — Lines 62–74: The "Purpose" subsection presents two separate lists without making their relationship clear. The first list covers built-in identities; the second, titled "In production environments, you may also have:", introduces additional role types. A reader may not understand that both lists feed into the same Approved Members list. Suggested fix: Replace the second list's lead-in with "Your environment may also include the following, which should be added to Approved Members:" and optionally merge both lists under a single lead-in sentence.

  • Clarity — Line 173: "don't rely on them as a long-term fix" is colloquial. Suggested fix: "Use exclusions sparingly. They are not a substitute for correctly defining Approved Members."

docs/policypak/components/leastprivilegemanager/technotes/tipsforadminapproval/scope.md

No issues found. (Link update only.)

docs/policypak/components/leastprivilegemanager/technotes/tipssecurerun/bestpractices.md

No issues found. (Link update only.)

docs/policypak/components/leastprivilegemanager/technotes/tipssecurerun/setup.md

  • Clarity — Line 13: "To get started," is redundant under the heading "#### Getting Started". Suggested fix: Remove "To get started," and open directly with "Use the Auto Rules Generator tool to generate rules from a machine that has all your installed applications."

docs/policypak/components/leastprivilegemanager/videolearningcenter/dllhijackprevention/basics.md

No issues found.

docs/policypak/components/leastprivilegemanager/videolearningcenter/dllhijackprevention/installers.md

No issues found.

docs/policypak/components/leastprivilegemanager/videolearningcenter/dllhijackprevention/poorlydesignedapps.md

  • Clarity — Lines 8–11: The three bullets describe two distinct scenarios without signaling the shift. Bullets 1–2 describe an actual attack being blocked ("loads a malicious Evil.dll"); bullet 3 pivots to a false positive scenario ("create a DLL Hijack Protection rule to allow the approved DLL") without explaining the context change. A reader preparing to watch the video may not understand that bullet 3 refers to a separate, legitimate-app scenario in the video. Suggested fix: Split into two groups with labels, for example: "Attack scenario: The app loads malicious Evil.dll ... False positive handling: To allow a legitimate DLL that triggers the same detection, ..."

docs/policypak/components/leastprivilegemanager/videolearningcenter/dllhijackprevention/popups.md

No issues found.

docs/policypak/components/leastprivilegemanager/videolearningcenter/howtoandtechsupport/stopransomware.md

File deleted — no review applicable.

docs/policypak/components/leastprivilegemanager/videolearningcenter/securerun/autorulesgeneratortool.md

No issues found. (File move + sidebar position change only.)

docs/policypak/components/leastprivilegemanager/videolearningcenter/securerun/feature.md

No issues found. (File move + sidebar position change only.)

docs/policypak/components/leastprivilegemanager/videolearningcenter/securerun/preventunsigned.md

No issues found. (File move + trailing blank line removal only.)

docs/policypak/components/leastprivilegemanager/videolearningcenter/securerun/usersystemexecutables.md

No issues found. (File move + sidebar position change only.)

docs/policypak/components/leastprivilegemanager/videolearningcenter/videolearningcenter.md

No issues found. (Link updates only.)

docs/policypak/components/scriptstriggers/knowledgebase/troubleshooting/systemprocesses.md

No issues found. (Link update only.)

docs/policypak/gettingstarted/misc/knowledgebase/gettingstarted/history.md

No issues found. (Link update only.)

Summary

6 editorial suggestions across 3 files (tipsdllhijackprevention/overview.md, tipssecurerun/setup.md, videolearningcenter/dllhijackprevention/poorlydesignedapps.md). The majority of this PR is link-path corrections and sidebar reordering, which look correct. The main new article (overview.md) is well-structured and technically clear — the issues are limited to heading case and two clarity points. Vale and Dale issues are auto-fixed separately.

What to do next:

Comment @claude on this PR followed by your instructions to get help:

  • @claude fix all issues — fix all editorial issues
  • @claude fix the heading case in tipsdllhijackprevention/overview.md — fix just the headings
  • @claude help improve the flow of this document — get writing assistance
  • @claude explain the heading case issue — understand why something was flagged

You can ask Claude anything about the review or about Netwrix writing standards.

Automated fixes are only available for branches in this repository, not forks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@PSR-SMM PSR-SMM Awaiting requested review from PSR-SMM

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@jeremymoskowitz-netwrix @jth-nw