Applocker parser

Parse gpohound output for AppLocker policies. For each of these policies, extract the XML contents from the registry values in the GPO.

Usage

Run gpohound to obtain JSON output:

gpohound dump --json 2> gpohound_dump.json

Then run this parser:

python parse.py gpohound_dump.json