<?xml version="1.0" encoding="utf-8"?>
<!--
  MDE Toolkit - Administrative Template
  Manages HKLM\SOFTWARE\Policies\MDE-Toolkit

  Copy MDE-Toolkit.admx to the PolicyDefinitions folder and
  en-US\MDE-Toolkit.adml to PolicyDefinitions\en-US.

  Central Store: \\<domain>\SYSVOL\<domain>\Policies\PolicyDefinitions
  Local:         C:\Windows\PolicyDefinitions
-->
<policyDefinitions xmlns:xsd="http://www.w3.org/2001/XMLSchema"
				   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
				   revision="1.0"
				   schemaVersion="1.0"
				   xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">

  <policyNamespaces>
	<target prefix="mdetoolkit" namespace="MDEToolkit.Policies.Admin" />
	<using prefix="windows" namespace="Microsoft.Policies.Windows" />
  </policyNamespaces>

  <resources minRequiredRevision="1.0" />

  <supportedOn>
	<definitions>
	  <definition name="SUPPORTED_MDEToolkit_30" displayName="$(string.SUPPORTED_MDEToolkit_30)" />
	  <definition name="SUPPORTED_MDEToolkit_331" displayName="$(string.SUPPORTED_MDEToolkit_331)" />
	  <definition name="SUPPORTED_MDEToolkit_332" displayName="$(string.SUPPORTED_MDEToolkit_332)" />
	</definitions>
  </supportedOn>

  <categories>
	<category name="CAT_MDEToolkit" displayName="$(string.CAT_MDEToolkit)" explainText="$(string.CAT_MDEToolkit_Help)" />
	<category name="CAT_Collector" displayName="$(string.CAT_Collector)" explainText="$(string.CAT_Collector_Help)">
	  <parentCategory ref="CAT_MDEToolkit" />
	</category>
	<category name="CAT_Upload" displayName="$(string.CAT_Upload)" explainText="$(string.CAT_Upload_Help)">
	  <parentCategory ref="CAT_MDEToolkit" />
	</category>
	<category name="CAT_Identity" displayName="$(string.CAT_Identity)" explainText="$(string.CAT_Identity_Help)">
	  <parentCategory ref="CAT_MDEToolkit" />
	</category>
	<category name="CAT_Scope" displayName="$(string.CAT_Scope)" explainText="$(string.CAT_Scope_Help)">
	  <parentCategory ref="CAT_MDEToolkit" />
	</category>
	<category name="CAT_Tagging" displayName="$(string.CAT_Tagging)" explainText="$(string.CAT_Tagging_Help)">
	  <parentCategory ref="CAT_MDEToolkit" />
	</category>
	<category name="CAT_Lockdown" displayName="$(string.CAT_Lockdown)" explainText="$(string.CAT_Lockdown_Help)">
	  <parentCategory ref="CAT_MDEToolkit" />
	</category>
	<category name="CAT_Asr" displayName="$(string.CAT_Asr)" explainText="$(string.CAT_Asr_Help)">
	  <parentCategory ref="CAT_MDEToolkit" />
	</category>
	<category name="CAT_Logging" displayName="$(string.CAT_Logging)" explainText="$(string.CAT_Logging_Help)">
	  <parentCategory ref="CAT_MDEToolkit" />
	</category>
	<category name="CAT_Visibility" displayName="$(string.CAT_Visibility)" explainText="$(string.CAT_Visibility_Help)">
	  <parentCategory ref="CAT_MDEToolkit" />
	</category>
  </categories>

  <policies>

	<!-- ============ Background Collector ============ -->
	<policy name="Pol_EnableBackgroundCollector" class="Machine"
			displayName="$(string.Pol_EnableBackgroundCollector)"
			explainText="$(string.Pol_EnableBackgroundCollector_Help)"
			key="SOFTWARE\Policies\MDE-Toolkit" valueName="EnableBackgroundCollector">
	  <parentCategory ref="CAT_Collector" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <enabledValue><decimal value="1" /></enabledValue>
	  <disabledValue><decimal value="0" /></disabledValue>
	</policy>

	<policy name="Pol_CollectionIntervalMinutes" class="Machine"
			displayName="$(string.Pol_CollectionIntervalMinutes)"
			explainText="$(string.Pol_CollectionIntervalMinutes_Help)"
			presentation="$(presentation.Pol_CollectionIntervalMinutes)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Collector" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<decimal id="CollectionIntervalMinutes" valueName="CollectionIntervalMinutes" minValue="5" maxValue="10080" />
	  </elements>
	</policy>

	<policy name="Pol_CacheFolder" class="Machine"
			displayName="$(string.Pol_CacheFolder)"
			explainText="$(string.Pol_CacheFolder_Help)"
			presentation="$(presentation.Pol_CacheFolder)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Collector" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<text id="CacheFolder" valueName="CacheFolder" required="true" maxLength="260" />
	  </elements>
	</policy>

	<policy name="Pol_MaxCacheFiles" class="Machine"
			displayName="$(string.Pol_MaxCacheFiles)"
			explainText="$(string.Pol_MaxCacheFiles_Help)"
			presentation="$(presentation.Pol_MaxCacheFiles)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Collector" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<decimal id="MaxCacheFiles" valueName="MaxCacheFiles" minValue="1" maxValue="1000" />
	  </elements>
	</policy>

	<policy name="Pol_CacheRetentionDays" class="Machine"
			displayName="$(string.Pol_CacheRetentionDays)"
			explainText="$(string.Pol_CacheRetentionDays_Help)"
			presentation="$(presentation.Pol_CacheRetentionDays)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Collector" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<decimal id="CacheRetentionDays" valueName="CacheRetentionDays" minValue="0" maxValue="3650" />
	  </elements>
	</policy>

	<!-- ============ Upload ============ -->
	<policy name="Pol_EnableFunctionAppUpload" class="Machine"
			displayName="$(string.Pol_EnableFunctionAppUpload)"
			explainText="$(string.Pol_EnableFunctionAppUpload_Help)"
			key="SOFTWARE\Policies\MDE-Toolkit" valueName="EnableFunctionAppUpload">
	  <parentCategory ref="CAT_Upload" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <enabledValue><decimal value="1" /></enabledValue>
	  <disabledValue><decimal value="0" /></disabledValue>
	</policy>

	<policy name="Pol_FunctionAppEndpoint" class="Machine"
			displayName="$(string.Pol_FunctionAppEndpoint)"
			explainText="$(string.Pol_FunctionAppEndpoint_Help)"
			presentation="$(presentation.Pol_FunctionAppEndpoint)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Upload" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<text id="FunctionAppUrl" valueName="FunctionAppUrl" required="true" maxLength="512" />
		<text id="FunctionAppAudience" valueName="FunctionAppAudience" required="true" maxLength="256" />
	  </elements>
	</policy>

	<policy name="Pol_UploadIntervalMinutes" class="Machine"
			displayName="$(string.Pol_UploadIntervalMinutes)"
			explainText="$(string.Pol_UploadIntervalMinutes_Help)"
			presentation="$(presentation.Pol_UploadIntervalMinutes)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Upload" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<decimal id="UploadIntervalMinutes" valueName="UploadIntervalMinutes" minValue="5" maxValue="10080" />
	  </elements>
	</policy>

	<policy name="Pol_UploadTimeoutSeconds" class="Machine"
			displayName="$(string.Pol_UploadTimeoutSeconds)"
			explainText="$(string.Pol_UploadTimeoutSeconds_Help)"
			presentation="$(presentation.Pol_UploadTimeoutSeconds)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Upload" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<decimal id="UploadTimeoutSeconds" valueName="UploadTimeoutSeconds" minValue="5" maxValue="300" />
	  </elements>
	</policy>

	<policy name="Pol_UploadRetryCount" class="Machine"
			displayName="$(string.Pol_UploadRetryCount)"
			explainText="$(string.Pol_UploadRetryCount_Help)"
			presentation="$(presentation.Pol_UploadRetryCount)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Upload" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<decimal id="UploadRetryCount" valueName="UploadRetryCount" minValue="0" maxValue="10" />
	  </elements>
	</policy>

	<policy name="Pol_EnableBlobUpload" class="Machine"
			displayName="$(string.Pol_EnableBlobUpload)"
			explainText="$(string.Pol_EnableBlobUpload_Help)"
			key="SOFTWARE\Policies\MDE-Toolkit" valueName="EnableBlobUpload">
	  <parentCategory ref="CAT_Upload" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <enabledValue><decimal value="1" /></enabledValue>
	  <disabledValue><decimal value="0" /></disabledValue>
	</policy>

	<policy name="Pol_BlobStorage" class="Machine"
			displayName="$(string.Pol_BlobStorage)"
			explainText="$(string.Pol_BlobStorage_Help)"
			presentation="$(presentation.Pol_BlobStorage)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Upload" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<text id="BlobStorageAccountName" valueName="BlobStorageAccountName" required="true" maxLength="64" />
		<text id="BlobContainerName" valueName="BlobContainerName" required="false" maxLength="64" />
		<text id="BlobEndpointSuffix" valueName="BlobEndpointSuffix" required="false" maxLength="128" />
	  </elements>
	</policy>

	<!-- ============ Identity ============ -->
	<policy name="Pol_TenantId" class="Machine"
			displayName="$(string.Pol_TenantId)"
			explainText="$(string.Pol_TenantId_Help)"
			presentation="$(presentation.Pol_TenantId)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Identity" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<text id="TenantId" valueName="TenantId" required="true" maxLength="64" />
	  </elements>
	</policy>

	<policy name="Pol_PreferredAuthMethod" class="Machine"
			displayName="$(string.Pol_PreferredAuthMethod)"
			explainText="$(string.Pol_PreferredAuthMethod_Help)"
			presentation="$(presentation.Pol_PreferredAuthMethod)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Identity" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<enum id="PreferredAuthMethod" valueName="PreferredAuthMethod" required="true">
		  <item displayName="$(string.Auth_Default)"><value><string>Default</string></value></item>
		  <item displayName="$(string.Auth_WAM)"><value><string>WAM</string></value></item>
		  <item displayName="$(string.Auth_DeviceCode)"><value><string>DeviceCode</string></value></item>
		  <item displayName="$(string.Auth_ManagedIdentity)"><value><string>ManagedIdentity</string></value></item>
		</enum>
	  </elements>
	</policy>

	<policy name="Pol_AzureEnvironment" class="Machine"
			displayName="$(string.Pol_AzureEnvironment)"
			explainText="$(string.Pol_AzureEnvironment_Help)"
			presentation="$(presentation.Pol_AzureEnvironment)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Identity" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<enum id="AzureEnvironment" valueName="AzureEnvironment" required="true">
		  <item displayName="$(string.Env_Public)"><value><string>Public</string></value></item>
		  <item displayName="$(string.Env_USGov)"><value><string>USGov</string></value></item>
		  <item displayName="$(string.Env_China)"><value><string>China</string></value></item>
		  <item displayName="$(string.Env_Germany)"><value><string>Germany</string></value></item>
		</enum>
	  </elements>
	</policy>

	<policy name="Pol_AuthorityHostOverride" class="Machine"
			displayName="$(string.Pol_AuthorityHostOverride)"
			explainText="$(string.Pol_AuthorityHostOverride_Help)"
			presentation="$(presentation.Pol_AuthorityHostOverride)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Identity" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<text id="AuthorityHostOverride" valueName="AuthorityHostOverride" required="true" maxLength="256" />
	  </elements>
	</policy>

	<!-- ============ Data Collection Scope ============ -->
	<policy name="Pol_CollectDefenderStatus" class="Machine"
			displayName="$(string.Pol_CollectDefenderStatus)"
			explainText="$(string.Pol_CollectDefenderStatus_Help)"
			key="SOFTWARE\Policies\MDE-Toolkit" valueName="CollectDefenderStatus">
	  <parentCategory ref="CAT_Scope" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <enabledValue><decimal value="1" /></enabledValue>
	  <disabledValue><decimal value="0" /></disabledValue>
	</policy>

	<policy name="Pol_CollectDefenderPolicies" class="Machine"
			displayName="$(string.Pol_CollectDefenderPolicies)"
			explainText="$(string.Pol_CollectDefenderPolicies_Help)"
			key="SOFTWARE\Policies\MDE-Toolkit" valueName="CollectDefenderPolicies">
	  <parentCategory ref="CAT_Scope" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <enabledValue><decimal value="1" /></enabledValue>
	  <disabledValue><decimal value="0" /></disabledValue>
	</policy>

	<policy name="Pol_CollectFirewallStatus" class="Machine"
			displayName="$(string.Pol_CollectFirewallStatus)"
			explainText="$(string.Pol_CollectFirewallStatus_Help)"
			key="SOFTWARE\Policies\MDE-Toolkit" valueName="CollectFirewallStatus">
	  <parentCategory ref="CAT_Scope" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <enabledValue><decimal value="1" /></enabledValue>
	  <disabledValue><decimal value="0" /></disabledValue>
	</policy>

	<policy name="Pol_CollectAppControl" class="Machine"
			displayName="$(string.Pol_CollectAppControl)"
			explainText="$(string.Pol_CollectAppControl_Help)"
			key="SOFTWARE\Policies\MDE-Toolkit" valueName="CollectAppControl">
	  <parentCategory ref="CAT_Scope" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <enabledValue><decimal value="1" /></enabledValue>
	  <disabledValue><decimal value="0" /></disabledValue>
	</policy>

	<policy name="Pol_CollectIntuneEnrollment" class="Machine"
			displayName="$(string.Pol_CollectIntuneEnrollment)"
			explainText="$(string.Pol_CollectIntuneEnrollment_Help)"
			key="SOFTWARE\Policies\MDE-Toolkit" valueName="CollectIntuneEnrollment">
	  <parentCategory ref="CAT_Scope" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <enabledValue><decimal value="1" /></enabledValue>
	  <disabledValue><decimal value="0" /></disabledValue>
	</policy>

	<policy name="Pol_CollectDeviceGuard" class="Machine"
			displayName="$(string.Pol_CollectDeviceGuard)"
			explainText="$(string.Pol_CollectDeviceGuard_Help)"
			key="SOFTWARE\Policies\MDE-Toolkit" valueName="CollectDeviceGuard">
	  <parentCategory ref="CAT_Scope" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <enabledValue><decimal value="1" /></enabledValue>
	  <disabledValue><decimal value="0" /></disabledValue>
	</policy>

	<!-- ============ Tagging ============ -->
	<policy name="Pol_DeviceTagging" class="Machine"
			displayName="$(string.Pol_DeviceTagging)"
			explainText="$(string.Pol_DeviceTagging_Help)"
			presentation="$(presentation.Pol_DeviceTagging)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Tagging" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<text id="DeviceTag" valueName="DeviceTag" required="false" maxLength="128" />
		<text id="OrgUnit" valueName="OrgUnit" required="false" maxLength="128" />
		<text id="Environment" valueName="Environment" required="false" maxLength="64" />
	  </elements>
	</policy>

	<!-- ============ Lockdown ============ -->
	<policy name="Pol_DisableExportButtons" class="Machine"
			displayName="$(string.Pol_DisableExportButtons)"
			explainText="$(string.Pol_DisableExportButtons_Help)"
			key="SOFTWARE\Policies\MDE-Toolkit" valueName="DisableExportButtons">
	  <parentCategory ref="CAT_Lockdown" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_332" />
	  <enabledValue><decimal value="1" /></enabledValue>
	  <disabledValue><decimal value="0" /></disabledValue>
	</policy>

	<policy name="Pol_DisableRemoteTarget" class="Machine"
			displayName="$(string.Pol_DisableRemoteTarget)"
			explainText="$(string.Pol_DisableRemoteTarget_Help)"
			key="SOFTWARE\Policies\MDE-Toolkit" valueName="DisableRemoteTarget">
	  <parentCategory ref="CAT_Lockdown" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_332" />
	  <enabledValue><decimal value="1" /></enabledValue>
	  <disabledValue><decimal value="0" /></disabledValue>
	</policy>

	<policy name="Pol_ForceReadOnlyMode" class="Machine"
			displayName="$(string.Pol_ForceReadOnlyMode)"
			explainText="$(string.Pol_ForceReadOnlyMode_Help)"
			key="SOFTWARE\Policies\MDE-Toolkit" valueName="ForceReadOnlyMode">
	  <parentCategory ref="CAT_Lockdown" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_331" />
	  <enabledValue><decimal value="1" /></enabledValue>
	  <disabledValue><decimal value="0" /></disabledValue>
	</policy>

	<policy name="Pol_ShowPreviewFeatures" class="Machine"
			displayName="$(string.Pol_ShowPreviewFeatures)"
			explainText="$(string.Pol_ShowPreviewFeatures_Help)"
			key="SOFTWARE\Policies\MDE-Toolkit" valueName="ShowPreviewFeatures">
	  <parentCategory ref="CAT_Lockdown" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_332" />
	  <enabledValue><decimal value="1" /></enabledValue>
	  <disabledValue><decimal value="0" /></disabledValue>
	</policy>

	<!-- ============ ASR Exclusion Guardrails ============ -->
	<policy name="Pol_AsrAllowPermanentExclusions" class="Machine"
			displayName="$(string.Pol_AsrAllowPermanentExclusions)"
			explainText="$(string.Pol_AsrAllowPermanentExclusions_Help)"
			key="SOFTWARE\Policies\MDE-Toolkit" valueName="AsrAllowPermanentExclusions">
	  <parentCategory ref="CAT_Asr" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_331" />
	  <enabledValue><decimal value="1" /></enabledValue>
	  <disabledValue><decimal value="0" /></disabledValue>
	</policy>

	<policy name="Pol_AsrAllowTemporaryExclusions" class="Machine"
			displayName="$(string.Pol_AsrAllowTemporaryExclusions)"
			explainText="$(string.Pol_AsrAllowTemporaryExclusions_Help)"
			key="SOFTWARE\Policies\MDE-Toolkit" valueName="AsrAllowTemporaryExclusions">
	  <parentCategory ref="CAT_Asr" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_331" />
	  <enabledValue><decimal value="1" /></enabledValue>
	  <disabledValue><decimal value="0" /></disabledValue>
	</policy>

	<policy name="Pol_AsrExclusionMaxHours" class="Machine"
			displayName="$(string.Pol_AsrExclusionMaxHours)"
			explainText="$(string.Pol_AsrExclusionMaxHours_Help)"
			presentation="$(presentation.Pol_AsrExclusionMaxHours)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Asr" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_331" />
	  <elements>
		<decimal id="AsrExclusionMaxHours" valueName="AsrExclusionMaxHours" minValue="0" maxValue="8760" />
	  </elements>
	</policy>

	<policy name="Pol_AsrExclusionDurationsHours" class="Machine"
			displayName="$(string.Pol_AsrExclusionDurationsHours)"
			explainText="$(string.Pol_AsrExclusionDurationsHours_Help)"
			presentation="$(presentation.Pol_AsrExclusionDurationsHours)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Asr" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_331" />
	  <elements>
		<text id="AsrExclusionDurationsHours" valueName="AsrExclusionDurationsHours" required="true" maxLength="128" />
	  </elements>
	</policy>

	<!-- ============ Logging ============ -->
	<policy name="Pol_LogLevel" class="Machine"
			displayName="$(string.Pol_LogLevel)"
			explainText="$(string.Pol_LogLevel_Help)"
			presentation="$(presentation.Pol_LogLevel)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Logging" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<enum id="LogLevel" valueName="LogLevel" required="true">
		  <item displayName="$(string.Log_None)"><value><string>None</string></value></item>
		  <item displayName="$(string.Log_Error)"><value><string>Error</string></value></item>
		  <item displayName="$(string.Log_Warning)"><value><string>Warning</string></value></item>
		  <item displayName="$(string.Log_Info)"><value><string>Info</string></value></item>
		  <item displayName="$(string.Log_Verbose)"><value><string>Verbose</string></value></item>
		</enum>
	  </elements>
	</policy>

	<policy name="Pol_LogFilePath" class="Machine"
			displayName="$(string.Pol_LogFilePath)"
			explainText="$(string.Pol_LogFilePath_Help)"
			presentation="$(presentation.Pol_LogFilePath)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Logging" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<text id="LogFilePath" valueName="LogFilePath" required="true" maxLength="260" />
	  </elements>
	</policy>

	<policy name="Pol_MaxLogSizeMb" class="Machine"
			displayName="$(string.Pol_MaxLogSizeMb)"
			explainText="$(string.Pol_MaxLogSizeMb_Help)"
			presentation="$(presentation.Pol_MaxLogSizeMb)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Logging" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<decimal id="MaxLogSizeMb" valueName="MaxLogSizeMb" minValue="1" maxValue="500" />
	  </elements>
	</policy>

	<!-- ============ Page Visibility ============ -->
	<policy name="Pol_VisibilityAsrDashboardPage" class="Machine"
			displayName="$(string.Pol_VisibilityAsrDashboardPage)"
			explainText="$(string.Pol_Visibility_Help)"
			presentation="$(presentation.Pol_Visibility)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Visibility" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<enum id="Visibility" valueName="VisibilityAsrDashboardPage" required="true">
		  <item displayName="$(string.Vis_Hidden)"><value><decimal value="0" /></value></item>
		  <item displayName="$(string.Vis_Admin)"><value><decimal value="1" /></value></item>
		  <item displayName="$(string.Vis_User)"><value><decimal value="2" /></value></item>
		  <item displayName="$(string.Vis_Both)"><value><decimal value="3" /></value></item>
		</enum>
	  </elements>
	</policy>

	<policy name="Pol_VisibilityAsrEventsPage" class="Machine"
			displayName="$(string.Pol_VisibilityAsrEventsPage)"
			explainText="$(string.Pol_Visibility_Help)"
			presentation="$(presentation.Pol_Visibility)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Visibility" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_331" />
	  <elements>
		<enum id="Visibility" valueName="VisibilityAsrEventsPage" required="true">
		  <item displayName="$(string.Vis_Hidden)"><value><decimal value="0" /></value></item>
		  <item displayName="$(string.Vis_Admin)"><value><decimal value="1" /></value></item>
		  <item displayName="$(string.Vis_User)"><value><decimal value="2" /></value></item>
		  <item displayName="$(string.Vis_Both)"><value><decimal value="3" /></value></item>
		</enum>
	  </elements>
	</policy>

	<policy name="Pol_VisibilityFirewallPage" class="Machine"
			displayName="$(string.Pol_VisibilityFirewallPage)"
			explainText="$(string.Pol_Visibility_Help)"
			presentation="$(presentation.Pol_Visibility)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Visibility" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<enum id="Visibility" valueName="VisibilityFirewallPage" required="true">
		  <item displayName="$(string.Vis_Hidden)"><value><decimal value="0" /></value></item>
		  <item displayName="$(string.Vis_Admin)"><value><decimal value="1" /></value></item>
		  <item displayName="$(string.Vis_User)"><value><decimal value="2" /></value></item>
		  <item displayName="$(string.Vis_Both)"><value><decimal value="3" /></value></item>
		</enum>
	  </elements>
	</policy>

	<policy name="Pol_VisibilityWfpFiltersPage" class="Machine"
			displayName="$(string.Pol_VisibilityWfpFiltersPage)"
			explainText="$(string.Pol_Visibility_Help)"
			presentation="$(presentation.Pol_Visibility)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Visibility" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<enum id="Visibility" valueName="VisibilityWfpFiltersPage" required="true">
		  <item displayName="$(string.Vis_Hidden)"><value><decimal value="0" /></value></item>
		  <item displayName="$(string.Vis_Admin)"><value><decimal value="1" /></value></item>
		  <item displayName="$(string.Vis_User)"><value><decimal value="2" /></value></item>
		  <item displayName="$(string.Vis_Both)"><value><decimal value="3" /></value></item>
		</enum>
	  </elements>
	</policy>

	<policy name="Pol_VisibilityFwMigrationPage" class="Machine"
			displayName="$(string.Pol_VisibilityFwMigrationPage)"
			explainText="$(string.Pol_Visibility_Help)"
			presentation="$(presentation.Pol_Visibility)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Visibility" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<enum id="Visibility" valueName="VisibilityFwMigrationPage" required="true">
		  <item displayName="$(string.Vis_Hidden)"><value><decimal value="0" /></value></item>
		  <item displayName="$(string.Vis_Admin)"><value><decimal value="1" /></value></item>
		  <item displayName="$(string.Vis_User)"><value><decimal value="2" /></value></item>
		  <item displayName="$(string.Vis_Both)"><value><decimal value="3" /></value></item>
		</enum>
	  </elements>
	</policy>

	<policy name="Pol_VisibilityAppControlAdvancedHuntingPage" class="Machine"
			displayName="$(string.Pol_VisibilityAppControlAdvancedHuntingPage)"
			explainText="$(string.Pol_Visibility_Help)"
			presentation="$(presentation.Pol_Visibility)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Visibility" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<enum id="Visibility" valueName="VisibilityAppControlAdvancedHuntingPage" required="true">
		  <item displayName="$(string.Vis_Hidden)"><value><decimal value="0" /></value></item>
		  <item displayName="$(string.Vis_Admin)"><value><decimal value="1" /></value></item>
		  <item displayName="$(string.Vis_User)"><value><decimal value="2" /></value></item>
		  <item displayName="$(string.Vis_Both)"><value><decimal value="3" /></value></item>
		</enum>
	  </elements>
	</policy>

	<policy name="Pol_VisibilityMachineInvestigatorPage" class="Machine"
			displayName="$(string.Pol_VisibilityMachineInvestigatorPage)"
			explainText="$(string.Pol_VisibilityMachineInvestigatorPage_Help)"
			presentation="$(presentation.Pol_Visibility)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Visibility" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_332" />
	  <elements>
		<enum id="Visibility" valueName="VisibilityMachineInvestigatorPage" required="true">
		  <item displayName="$(string.Vis_Hidden)"><value><decimal value="0" /></value></item>
		  <item displayName="$(string.Vis_Admin)"><value><decimal value="1" /></value></item>
		  <item displayName="$(string.Vis_User)"><value><decimal value="2" /></value></item>
		  <item displayName="$(string.Vis_Both)"><value><decimal value="3" /></value></item>
		</enum>
	  </elements>
	</policy>

	<policy name="Pol_VisibilityDCPoliciesPage" class="Machine"
			displayName="$(string.Pol_VisibilityDCPoliciesPage)"
			explainText="$(string.Pol_Visibility_Help)"
			presentation="$(presentation.Pol_Visibility)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Visibility" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<enum id="Visibility" valueName="VisibilityDCPoliciesPage" required="true">
		  <item displayName="$(string.Vis_Hidden)"><value><decimal value="0" /></value></item>
		  <item displayName="$(string.Vis_Admin)"><value><decimal value="1" /></value></item>
		  <item displayName="$(string.Vis_User)"><value><decimal value="2" /></value></item>
		  <item displayName="$(string.Vis_Both)"><value><decimal value="3" /></value></item>
		</enum>
	  </elements>
	</policy>

	<policy name="Pol_VisibilityMdePoliciesPage" class="Machine"
			displayName="$(string.Pol_VisibilityMdePoliciesPage)"
			explainText="$(string.Pol_Visibility_Help)"
			presentation="$(presentation.Pol_Visibility)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Visibility" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<enum id="Visibility" valueName="VisibilityMdePoliciesPage" required="true">
		  <item displayName="$(string.Vis_Hidden)"><value><decimal value="0" /></value></item>
		  <item displayName="$(string.Vis_Admin)"><value><decimal value="1" /></value></item>
		  <item displayName="$(string.Vis_User)"><value><decimal value="2" /></value></item>
		  <item displayName="$(string.Vis_Both)"><value><decimal value="3" /></value></item>
		</enum>
	  </elements>
	</policy>

	<policy name="Pol_VisibilityNetworkingPage" class="Machine"
			displayName="$(string.Pol_VisibilityNetworkingPage)"
			explainText="$(string.Pol_Visibility_Help)"
			presentation="$(presentation.Pol_Visibility)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Visibility" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<enum id="Visibility" valueName="VisibilityNetworkingPage" required="true">
		  <item displayName="$(string.Vis_Hidden)"><value><decimal value="0" /></value></item>
		  <item displayName="$(string.Vis_Admin)"><value><decimal value="1" /></value></item>
		  <item displayName="$(string.Vis_User)"><value><decimal value="2" /></value></item>
		  <item displayName="$(string.Vis_Both)"><value><decimal value="3" /></value></item>
		</enum>
	  </elements>
	</policy>

	<policy name="Pol_VisibilityCiToolPage" class="Machine"
			displayName="$(string.Pol_VisibilityCiToolPage)"
			explainText="$(string.Pol_Visibility_Help)"
			presentation="$(presentation.Pol_Visibility)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Visibility" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<enum id="Visibility" valueName="VisibilityCiToolPage" required="true">
		  <item displayName="$(string.Vis_Hidden)"><value><decimal value="0" /></value></item>
		  <item displayName="$(string.Vis_Admin)"><value><decimal value="1" /></value></item>
		  <item displayName="$(string.Vis_User)"><value><decimal value="2" /></value></item>
		  <item displayName="$(string.Vis_Both)"><value><decimal value="3" /></value></item>
		</enum>
	  </elements>
	</policy>

	<policy name="Pol_VisibilityAiAnalysisPage" class="Machine"
			displayName="$(string.Pol_VisibilityAiAnalysisPage)"
			explainText="$(string.Pol_VisibilityAiAnalysisPage_Help)"
			presentation="$(presentation.Pol_Visibility)"
			key="SOFTWARE\Policies\MDE-Toolkit">
	  <parentCategory ref="CAT_Visibility" />
	  <supportedOn ref="SUPPORTED_MDEToolkit_30" />
	  <elements>
		<enum id="Visibility" valueName="VisibilityAiAnalysisPage" required="true">
		  <item displayName="$(string.Vis_Hidden)"><value><decimal value="0" /></value></item>
		  <item displayName="$(string.Vis_Admin)"><value><decimal value="1" /></value></item>
		  <item displayName="$(string.Vis_User)"><value><decimal value="2" /></value></item>
		  <item displayName="$(string.Vis_Both)"><value><decimal value="3" /></value></item>
		</enum>
	  </elements>
	</policy>

  </policies>
</policyDefinitions>
