<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved." xmlns:xsd="http://www.w3.org/2001/XMLSchema">
  <assemblyIdentity name="Microsoft-Windows-CodeIntegrity" version="10.0.26100.8655" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <dependency discoverable="no" resourceType="resources">
    <dependentAssembly dependencyType="prerequisite">
      <assemblyIdentity name="Microsoft-Windows-CodeIntegrity.Resources" version="10.0.26100.8655" processorArchitecture="amd64" language="*" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
    </dependentAssembly>
  </dependency>
  <file name="ci.dll" destinationPath="$(runtime.system32)\" sourceName="ci.dll" importPath="$(build.nttree)\Production\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>SjIuibeNhZmnvVyw3XZsJkrQYHdnVSUu6tO9ySuSwv0=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <memberships>
    <categoryMembership>
      <id name="Microsoft-Windows-CodeIntegrity" version="10.0.26100.8655" publicKeyToken="31bf3856ad364e35" buildType="release" language="neutral" processorArchitecture="amd64" />
    </categoryMembership>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="BootCritical" />
    </categoryMembership>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="BootRecovery" />
    </categoryMembership>
  </memberships>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WRP_PARENT_DIR_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1301bf;;;SY)(A;IOCIOI;GA;;;SY)(A;;0x1301bf;;;BA)(A;IOCIOI;GA;;;BA)(A;CIOI;GRGX;;;BU)(A;OICIIO;GA;;;CO)(A;CIOI;GRGX;;;S-1-15-2-1)(A;CIOI;GRGX;;;S-1-15-2-2)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_REGKEY_DYNAMIC_INSTALLED_SDDL" sddl="O:SYG:SYD:P(A;CI;KA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;KRKWSD;;;SY)(A;CI;KRKWSD;;;BA)(A;CI;KR;;;BU)(A;CI;KR;;;S-1-15-2-1)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)(A;;GRGX;;;S-1-15-2-2)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Security">
      <registryValue name="4ee76bd8-3cf4-44a0-a0ac-3937643e37a3" valueType="REG_BINARY" value="01000480140000002400000000000000340000000102000000000005200000002002000001020000000000052000000020020000020048000300000000001400ff0f120001010000000000051200000000001800ff0f1200010200000000000520000000200200000000140080000000010100000000000513000000" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Config" />
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Config\Default" />
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Protected">
      <registryValue name="RevocationListLastCreationTimeHigh" valueType="REG_DWORD" value="0x00000000" />
      <registryValue name="RevocationListLastCreationTimeLow" valueType="REG_DWORD" value="0x00000000" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.10.3.37!7">
      <registryValue name="Name" valueType="REG_SZ" value="@%SystemRoot%\System32\ci.dll,-100" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.10.3.42!7">
      <registryValue name="Name" valueType="REG_SZ" value="@%SystemRoot%\System32\ci.dll,-101" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Update\TargetingInfo\PersistentDynamicInstalled\RevocationList.amd64">
      <registryValue name="Version" valueType="REG_SZ" value="0.0.0.0" mutable="true" />
      <securityDescriptor name="WRP_REGKEY_DYNAMIC_INSTALLED_SDDL" />
    </registryKey>
  </registryKeys>
  <asmv3:configuration xmlns:asmv3="urn:schemas-microsoft-com:asm.v3" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
    <asmv3:configurationSchema>
      <xsd:schema xmlns="Microsoft-Windows-CodeIntegrity" targetNamespace="Microsoft-Windows-CodeIntegrity">
        <xsd:simpleType name="SkuPolicyRequiredType">
          <xsd:restriction base="xsd:integer">
            <xsd:minInclusive value="0" />
            <xsd:maxInclusive value="1" />
          </xsd:restriction>
        </xsd:simpleType>
        <xsd:element default="0" name="SkuPolicyRequired" type="SkuPolicyRequiredType" wcm:description="SkuPolicyRequired informs Windows Code Integrity to enable Windows Lockdown Policy (S Mode) on the device." wcm:displayName="Enable Windows Lockdown Policy (S Mode)" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy')" wcm:legacyType="REG_DWORD" wcm:passes="offlineServicing" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="0" name="EmodePolicyRequired" type="SkuPolicyRequiredType" wcm:description="EmodePolicyRequired informs Windows Code Integrity to enable Windows EMode Policy on the device." wcm:displayName="Enable Windows E-Mode Policy" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy')" wcm:legacyType="REG_DWORD" wcm:passes="offlineServicing" wcm:scope="allUsers" wcm:visible="true" />
      </xsd:schema>
    </asmv3:configurationSchema>
  </asmv3:configuration>
  <instrumentation xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <events xmlns="http://schemas.microsoft.com/win/2004/08/events">
      <provider guid="{4EE76BD8-3CF4-44a0-A0AC-3937643E37A3}" message="$(string.MSServicingProviderName)" messageFileName="%SystemRoot%\system32\ci.dll" name="Microsoft-Windows-CodeIntegrity" resourceFileName="%SystemRoot%\system32\ci.dll" symbol="CodeIntegrityEventProviderId">
        <channels>
          <channel chid="Operational" enabled="true" isolation="System" message="$(string.operationalChannelName)" name="Microsoft-Windows-CodeIntegrity/Operational" type="Operational" />
          <channel chid="Verbose" enabled="false" isolation="System" message="$(string.verboseChannelName)" name="Microsoft-Windows-CodeIntegrity/Verbose" type="Debug" />
        </channels>
      </provider>
      <cmi />
    </events>
  </instrumentation>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="CiPolicyRefresh.NonRebootless" value="Code Integrity policy %5 %2 is set to unrefreshable. id %4. Status: %6" />
        <string id="CiPolicyRefresh.NoChange" value="No change in active Code Integrity policy %5 %2 after refresh. id %4. Status %6" />
        <string id="CiPolicyRefresh.NotAllowed" value="Not allowed to refresh Code Integrity policy %5 %2. id %4. Status %6" />
        <string id="CiPolicyRefresh.ActivatePolicySucceded" value="Refreshed and activated Code Integrity policy %5 %2. id %4. Status %6" />
        <string id="CiPolicyRefresh.ActivatePolicyFailed" value="Refreshed but not activated Code Integrity policy %5 %2. id %4. Status %6" />
        <string id="CiPolicyRefresh.Started" value="Code Integrity policy refresh started for %1 policies." />
        <string id="CiPolicyRefresh.Finished" value="Code Integrity policy refresh finished for %1 policies." />
        <string id="CiPolicyRefresh.Ignore" value="Ignoring refresh for Code Integrity policy ID %1. Status %2." />
        <string id="CiPolicyRefresh.Attempted" value="Trying to refresh Code Integrity policy with policy ID %1." />
        <string id="description1" value="Code Integrity Module" />
        <string id="description" value="Protects the integrity of image files installed on the local machine." />
        <string id="displayName" value="Code Integrity Module" />
        <string id="displayName1" value="Code Integrity Module" />
        <string id="MSServicingProviderName" value="Microsoft-Windows-CodeIntegrity" />
        <string id="operationalChannelName" value="Microsoft-Windows-CodeIntegrity/Operational" />
        <string id="verboseChannelName" value="Microsoft-Windows-CodeIntegrity/Verbose" />
        <string id="imagePageHashFoundInCatalog" value="Code Integrity found a set of per-page image hashes for the file %2 in a catalog %4." />
        <string id="imagePageHashFoundInImageCertificate" value="Code Integrity found a set of per-page image hashes for the file %2 in the image embedded certificate." />
        <string id="imageFileHashFoundInCatalog" value="Code Integrity found a file hash for the file %2 in a catalog %4." />
        <string id="imageFileHashFoundInImageCertificate" value="Code Integrity found a file hash for the file %2 in the image embedded certificate." />
        <string id="unsignedDriverLoaded" value="Code Integrity determined an unsigned kernel module %2 is loaded into the system. Check with the publisher to see if a signed version of the kernel module is available." />
        <string id="unsignedImageLoaded" value="Code Integrity determined an unsigned image %2 is loaded into the system. Check with the publisher to see if a signed version of the image is available." />
        <string id="imagePageHashNotFound" value="Code Integrity is unable to verify the image integrity of the file %2 because the set of per-page image hashes could not be found on the system." />
        <string id="imagePageHashNotFoundDebuggerAttached" value="Code Integrity is unable to verify the image integrity of the file %2 because the set of per-page image hashes could not be found on the system. The image is allowed to load because kernel mode debugger is attached." />
        <string id="imageFileHashNotFound" value="Windows is unable to verify the image integrity of the file %2 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source." />
        <string id="imageFileHashNotFoundDebuggerAttached" value="Code Integrity is unable to verify the image integrity of the file %2 because a file hash could not be found on the system. The image is allowed to load because kernel mode debugger is attached." />
        <string id="invalidCatalog" value="Code Integrity was unable to load the %2 catalog. Status %3." />
        <string id="catalogLoadComplete" value="Code Integrity successfully loaded the %2 catalog." />
        <string id="catalogLoadStart" value="Code Integrity started loading the %2 catalog." />
        <string id="reloadCatalogsStart" value="Code Integrity started reloading catalogs." />
        <string id="reloadCatalogsComplete" value="Code Integrity completed reloading catalogs. Status %1." />
        <string id="validateFileHashStart" value="Code Integrity started validating file hash of %2 file." />
        <string id="validateFileHashComplete" value="Code Integrity completed validating file hash. Status %1." />
        <string id="validatePageHashStart" value="Code Integrity started validating page hashes of %2 file." />
        <string id="validatePageHashComplete" value="Code Integrity completed validating page hashes. Status %1." />
        <string id="loadCatalogCacheStart" value="Code Integrity started loading catalog cache from %2 file." />
        <string id="loadCatalogCacheEntry" value="Code Integrity started loading catalog %2 from the cache file." />
        <string id="loadCatalogCacheComplete" value="Code Integrity completed loading catalog cache. Status %1." />
        <string id="saveCatalogCacheStart" value="Code Integrity started saving catalog cache to %2 file." />
        <string id="saveCatalogCacheEntry" value="Code Integrity saved catalog %2 to the cache file." />
        <string id="saveCatalogCacheComplete" value="Code Integrity completed saving catalog cache. Status %1." />
        <string id="revokedDriverLoaded" value="Code Integrity determined a revoked kernel module %2 is loaded into the system.  Check with the publisher to see if a new signed version of the kernel module is available." />
        <string id="revokedImageLoaded" value="Code Integrity determined a revoked image %2 is loaded into the system.  Check with the publisher to see if a new signed version of the image is available." />
        <string id="revokedDriverLoadedInDebugger" value="Code Integrity determined a revoked kernel module %2 is loaded into the system. The image is allowed to load because kernel mode debugger is attached." />
        <string id="revokedImageLoadedInDebugger" value="Code Integrity determined a revoked image %2 is loaded into the system. The image is allowed to load because kernel mode debugger is attached." />
        <string id="revokedDriverNotLoaded" value="The driver %2 is blocked from loading as the driver has been revoked by Microsoft." />
        <string id="revokedImageNotLoaded" value="Windows is unable to verify the integrity of the file %2 because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available." />
        <string id="pplRevokedImageNotLoaded" value="Windows blocked file %2 which has been disallowed for protected processes." />
        <string id="updateCatalogCacheFailed" value="Windows was unable to update the boot catalog cache file.  Status %1." />
        <string id="noEmbeddedSignatureDriverLoaded" value="Code Integrity determined kernel module %2 is loaded into the system which does not have a valid embedded digital signature. Check with the publisher to see if an embedded signed version of the kernel module is available." />
        <string id="revokedCatalog" value="Code Integrity was unable to load the %2 catalog because the signing certificate for this catalog has been revoked.  This can result in images failing to load because a valid signature cannot be found.  Check with the publisher to see if a new signed version of the catalog and images are available." />
        <string id="policyFailure" value="Code Integrity determined that a process (%4) attempted to load %2 that did not meet the %5 signing level requirements." />
        <string id="iumPolicyFailure" value="Code Integrity determined that a process (%4) attempted to load %2 that did not meet the signing requirements for Isolated User Mode." />
        <string id="atpPolicyFailure" value="Code Integrity determined that a process (%4) attempted to load %2 that did not meet the %5 signing level requirements or violated Advanced Threat Protection policy." />
        <string id="driverPolicyFailure" value="Code Integrity determined that a process (%4) attempted to load %2 that violated Driver policy." />
        <string id="atpPolicyFailureIgnored" value="Code Integrity determined that a process (%4) attempted to load %2 that did not meet the %5 signing level requirements or violated Advanced Threat Protection policy. However, due to code integrity auditing policy, the image was allowed to load." />
        <string id="driverPolicyFailureIgnored" value="Code Integrity determined that a process (%4) attempted to load %2 that violated Driver policy. However, due to code integrity auditing policy, the image was allowed to load." />
        <string id="sipolicyFailure" value="Code Integrity determined that a process (%4) attempted to load %2 that did not meet the %5 signing level requirements or violated code integrity policy." />
        <string id="sipolicyFailureV6" value="Code Integrity determined that a process (%4) attempted to load %2 that did not meet the %5 signing level requirements or violated code integrity policy (Policy ID:%29)." />
        <string id="sipolicyFailureV7" value="Code Integrity determined that a process (%4) attempted to load %2 that did not meet the %5 signing level requirements or violated code integrity policy (Policy ID:%33)." />
        <string id="policyDecisionOverridden" value="Code Integrity determined that a process (%4) attempted to load %2 that violated code integrity policy (Policy ID:%31). However, that decision was overriden by an endpoint security policy (Policy ID:%38)." />
        <string id="policyFailureIgnored" value="Code Integrity determined that a process (%4) attempted to load %2 that did not meet the %5 signing level requirements or violated code integrity policy. However, due to code integrity auditing policy, the image was allowed to load." />
        <string id="sipolicyFailureIgnored" value="Code Integrity determined that a process (%4) attempted to load %2 that did not meet the %5 signing level requirements or violated code integrity policy. However, due to code integrity auditing policy, the image was allowed to load." />
        <string id="sipolicyFailureAuditV6" value="Code Integrity determined that a process (%4) attempted to load %2 that did not meet the %5 signing level requirements or violated code integrity policy (Policy ID:%29). However, due to code integrity auditing policy, the image was allowed to load." />
        <string id="sipolicyFailureAuditV7" value="Code Integrity determined that a process (%4) attempted to load %2 that did not meet the %5 signing level requirements or violated code integrity policy (Policy ID:%33). However, due to code integrity auditing policy, the image was allowed to load." />
        <string id="sipolicyPerformance" value="Code Integrity determined that process (%4) spent %7 and %8 microseconds for Code Integrity check and policy check to load %2 with validated %6 signing level. For all components without EA cache, Code Integrity spent about %9‰ more time when policy enforced." />
        <string id="signingLevel.Unsigned" value="Unsigned" />
        <string id="signingLevel.Unchecked" value="Unchecked" />
        <string id="signingLevel.Enterprise" value="Enterprise" />
        <string id="signingLevel.Custom1" value="Custom 1" />
        <string id="signingLevel.Custom2" value="Custom 2" />
        <string id="signingLevel.Custom3" value="Custom 3 / Antimalware" />
        <string id="signingLevel.Custom4" value="Store or Enterprise (Custom 4)" />
        <string id="signingLevel.Custom5" value="Custom 5" />
        <string id="signingLevel.Custom6" value="Custom 6" />
        <string id="signingLevel.Authenticode" value="Authenticode" />
        <string id="signingLevel.Store" value="Store" />
        <string id="signingLevel.Microsoft" value="Microsoft" />
        <string id="signingLevel.DynamicCodeGen" value="Dynamic Code Generation" />
        <string id="signingLevel.Windows" value="Windows" />
        <string id="signingLevel.WindowsProtectedProcessLight" value="Windows Protected Process Light" />
        <string id="signingLevel.WindowsTCB" value="Windows TCB" />
        <string id="validateImageHeaderStart" value="Code Integrity started validating image header of %2 file." />
        <string id="validateImageHeaderComplete" value="Code Integrity completed validating image header. Status %1." />
        <string id="getFileCacheStart" value="Code Integrity started retrieving the cached data of %2 file." />
        <string id="getFileCacheComplete" value="Code Integrity completed retrieval of file cache. Status %1." />
        <string id="setFileCacheStart" value="Code Integrity started setting the cache of %2 file." />
        <string id="setFileCacheFailedValidation" value="Code Integrity failed to set cache for %2 file due to validation failure. Status %3." />
        <string id="setFileCacheFailedSigningLevel" value="Code Integrity failed to set cache for %2 file because it does not meet signing level requirements. Status %3." />
        <string id="setFileCacheComplete" value="Code Integrity completed setting the file cache. Status %1." />
        <string id="sdlFailure" value="Code Integrity determined that a process (%4) attempted to load %2 that did not meet the security requirements for %5." />
        <string id="sdlFailureIgnored" value="Code Integrity determined that a process (%4) attempted to load %2 that did not meet the security requirements for %5. However, due to system policy, the image was allowed to load." />
        <string id="sdlRequirementType.SharedSections" value="Shared Sections" />
        <string id="loadWeakCryptoRegistryValueFailed" value="Code Integrity was unable to load the weak crypto policy value from registry. Status %1." />
        <string id="loadWeakCryptoRegistryPolicyFailed" value="Code Integrity was unable to load the weak crypto policy from registry store. Status %1." />
        <string id="loadWeakCryptoPoliciesFailed" value="Code Integrity was unable to load the weak crypto policies. Status %1." />
        <string id="hvciAuditFailure" value="Code Integrity determined that the kernel module %2 is not compatible with hypervisor enforcement. Status %3." />
        <string id="hvciAuditFailure2" value="Code Integrity determined that a process (%6) attempted to load %2 that is not compatible with hypervisor enforcement. Failure bitmap %4. Status %3." />
        <string id="hvciUnalignedSection" value="Code Integrity determined that the module %2 is not compatible with hypervisor enforcement due to it having non-page aligned sections." />
        <string id="hvciWritableExecutableSection" value="Code Integrity determined that the module %2 is not compatible with strict mode hypervisor enforcement due to it having an executable section that is also writable." />
        <string id="hvciPageVerificationFailure" value="Code Integrity was unable to verify a page for a module verified using hypervisor enforcement. Status %1." />
        <string id="whqlEnforcementFailureIgnored" value="Code Integrity determined kernel module %2 that did not meet the WHQL requirements is loaded into the system. However, due to code integrity auditing policy, the image was allowed to load." />
        <string id="whqlEnforcementFailureExempted" value="Code Integrity determined kernel module %2 that did not meet the WHQL requirements is loaded into the system. Check with the publisher to see if a WHQL compliant kernel module is available." />
        <string id="whqlEnforcementEnabled" value="Code Integrity will enable WHQL driver enforcement for this boot session.  Settings %1. Exemption %2." />
        <string id="whqlEnforcementDisabled" value="Code Integrity will disable WHQL driver enforcement for this boot session.  Settings %1." />
        <string id="smartlockerVerboseMessage" value="Code Integrity testing module %2 against policy %11. Status %3" />
        <string id="policyType.Invalid" value="invalid Code Integrity policy" />
        <string id="policyType.SIPolicy" value="enterprise Code Integrity policy" />
        <string id="policyType.RevokeSIPolicy" value="Windows revoke Code Integrity policy" />
        <string id="policyType.SkuSIPolicy" value="SKU Code Integrity policy" />
        <string id="policyType.UpdateSIPolicy" value="enterprise update Code Integrity policy" />
        <string id="policyType.UpdateRevokeSIPolicy" value="Windows update revoke Code Integrity policy" />
        <string id="policyType.UpdateSkuSIPolicy" value="SKU update Code Integrity policy" />
        <string id="policyType.WinSIPolicy" value="Windows lockdown Code Integrity policy" />
        <string id="policyType.UpdateWinSIPolicy" value="Windows update lockdown Code Integrity policy" />
        <string id="policyType.AtpSIPolicy" value="Advanced Threat Protection Code Integrity policy" />
        <string id="policyType.UpdateAtpSIPolicy" value="Advanced Threat Protection update Code Integrity policy" />
        <string id="policyType.DriverSIPolicy" value="Driver Code Integrity policy" />
        <string id="policyType.UpdateDriverSIPolicy" value="Driver update revoke Code Integrity policy" />
        <string id="signatureInformation" value="Signature information for another event. Match using the Correlation Id." />
        <string id="HvciAuditFailure.NonNativeImage" value="Non-native image" />
        <string id="HvciAuditFailure.SectionAlignment" value="Invalid section alignment" />
        <string id="HvciAuditFailure.SectionVirtualAddressAlignment" value="A section has an invalid alignment" />
        <string id="HvciAuditFailure.WriteExecuteSection" value="A non-discarable section is both writable and executable" />
        <string id="HvciAuditFailure.SharedWriteExecuteSection" value="A shared section is both writable and executable" />
        <string id="HvciAuditFailure.ExecutableIAT" value="The Import Address Table is within an executable section" />
        <string id="HvciAuditFailure.InvalidIAT" value="The Import Address Table location is invalid" />
        <string id="HvciAuditFailure.UnlocatedIAT" value="The Import Address Table was not found" />
        <string id="HvciAuditFailure.GapBetweenSections" value="The image sections are not contiguous on disk" />
        <string id="HvciAuditFailure.SectionsOutOfOrder" value="The sections of the image are not in ascending order" />
        <string id="HvciAuditFailure.BadSectionSizing" value="A section of the image has invalid sizing" />
        <string id="HvciAuditFailure.NonConformantForAuthenticode" value="The image has a non-conformant Authenticode entry" />
        <string id="HvciAuditFailure.Unknown" value="Unknown failure" />
        <string id="windowsModeSwitchSuccess" value="Code Integrity successfully switched from %3 mode to %4 mode." />
        <string id="windowsModeSwitchFailed" value="Code Integrity failed to switch from %3 mode to %4 mode with error code %5." />
        <string id="windowsModeSwitchSwitched" value="Code Integrity already switched from %3 mode to %4 mode." />
        <string id="windowsMode.L3" value="L3" />
        <string id="windowsMode.L2" value="L2" />
        <string id="driverStlRefreshFailed" value="Code Integrity could not update the driver.stl revocation list. Status %1." />
        <string id="dynamicCodeTrustFailed" value="Code Integrity determined that %4 is trying to load %2 which failed the dynamic code trust verification with error code of %5." />
        <string id="dynamicCodeTrustAudited" value="Code Integrity determined that %4 is trying to load %2 which failed the dynamic code trust verification with error code of %5. However, due to code integrity auditing policy, the image was allowed to load." />
        <string id="policySignerInformation" value="Signature information for Code Integrity policy ID %1." />
        <string id="smartAppControlBlockDetails" value="Smart App Control Block Deteails" />
        <string id="trustedLaunchPolicyFailure" value="Code Integrity determined that a process (%4) attempted to load %2 that did not meet the Microsoft Windows Trusted Launch policy." />
      </stringTable>
    </resources>
  </localization>
  <directories>
    <directory destinationPath="$(runtime.system32)\CodeIntegrity">
      <securityDescriptor name="WRP_PARENT_DIR_DEFAULT_SDDL" />
    </directory>
    <directory destinationPath="$(runtime.system32)\CodeIntegrity\CiPolicies\Active">
      <securityDescriptor name="WRP_PARENT_DIR_DEFAULT_SDDL" />
    </directory>
    <directory destinationPath="$(runtime.system32)\CodeIntegrity\CiPolicies\Staged">
      <securityDescriptor name="WRP_PARENT_DIR_DEFAULT_SDDL" />
    </directory>
    <directory destinationPath="$(runtime.system32)\CodeIntegrity\CiPolicies\Reserved">
      <securityDescriptor name="WRP_PARENT_DIR_DEFAULT_SDDL" />
    </directory>
    <directory destinationPath="$(runtime.system32)\CodeIntegrity\Update\Previous">
      <securityDescriptor name="WRP_PARENT_DIR_DEFAULT_SDDL" />
    </directory>
  </directories>
  <migration ignoreConfigurationSection="Yes" settingsVersion="10">
    <machineSpecific>
      <migXml xmlns="">
        <rules context="System">
          <include>
            <objectSet>
              <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\CI [IntegrityLevelPolicy]</pattern>
              <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\CI [UMCIAuditMode]</pattern>
              <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\CI\Config\* [*]</pattern>
              <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\CI\Policy\* [*]</pattern>
              <pattern type="File">%windir%\System32\CodeIntegrity [SiPolicy.p7b]</pattern>
              <pattern type="File">%windir%\System32\CodeIntegrity\CiPolicies\Active\* [*]</pattern>
              <pattern type="File">%windir%\System32\CodeIntegrity\Update [driver.stl]</pattern>
              <pattern type="File">%windir%\System32\CodeIntegrity\Update\Previous [driver.stl]</pattern>
            </objectSet>
          </include>
          <exclude>
            <objectSet>
              <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\CI\Policy [ManufacturingMode]</pattern>
            </objectSet>
          </exclude>
        </rules>
      </migXml>
    </machineSpecific>
    <supportedComponents>
      <supportedComponent>
        <assemblyIdentity name="_" version="1.0.0.0" />
        <supportedComponentIdentity language="neutral" name="Microsoft-Windows-CodeIntegrity" processorArchitecture="*" settingsVersionRange="0-10" xmlns="urn:schemas-microsoft-com:asm.v3" />
      </supportedComponent>
    </supportedComponents>
  </migration>
</assembly>