It works! We have application allow listing with AppLocker. Pushed out the settings from Intune. This is awesome!
NOTE: No links to instructions for Intune and AppLocker. I need to find good documentation or write my own.
LINKS
Security Onion
Getting started with Elastic Stack
Sysmon
AppLocker
FIND US ON
Twitter - DamienHull
YouTube