Skip to content
Documentation

Built-in Learning Pages

UEC includes two focused explainers for teams comparing endpoint-control approaches.

UEC includes two focused explainers for teams comparing endpoint-control approaches.

Page Use
App Control vs AppLocker Explain why UEC standardises on WDAC semantics
Windows security events Learn the event families used by endpoint telemetry

App Control versus AppLocker learning page in light mode App Control versus AppLocker learning page in dark mode

The page compares model, platform support, policy structure and management assumptions. Use it when an administrator proposes converting an old AppLocker GPO into UEC policy.

Windows security events learning page in light mode Windows security events learning page in dark mode

This complements the live Events → Event Codes reference by explaining event families before you filter a live incident.