ASRGEN
ASR Configurator, Essentials and Atomic Testing. Configure and test Attack Surface Reduction rules.
Visit https://asrgen.streamlit.app/ or git clone https://github.com/MHaggis/ASRGEN.git ⚠ The Problem
Configuring Attack Surface Reduction (ASR) rules and testing their effectiveness requires manual effort and deep knowledge of each rule.
✓ The Solution
ASRGEN provides tools for configuring ASR rules and atomic tests for validating their effectiveness.
⚡ Impact
Helps defenders properly configure and validate ASR rules for improved endpoint protection.
Overview
ASRGEN is your toolkit for Attack Surface Reduction rule configuration and testing.
Features
- ASR rule configuration
- Atomic testing for ASR rules
- Defender for Endpoint integration
Configure and test ASR rules
Related Modules
AppLockerGen
AppLocker Policy Generator. Create and manage AppLocker policies programmatically.
LOLDrivers
Living Off The Land Drivers - A curated list of Windows drivers used by adversaries to bypass security controls. The definitive resource for vulnerable driver detection.
MSIXBuilder
MSIX Building Made Easy for Defenders. Create MSIX packages for testing and analysis.