Block processes from running, while allowing exceptions. (Ie. Block powershell.exe from being run by anything except your RMM tool). Will include all of the "Microsoft recommended block rules" out of the box.