Skip to content

Add ASR rules exclusions #2

Open
@TuemmlerKelch

Description

@TuemmlerKelch

Please implement the following logic:

  1. Defender not active
    1.1 Skip this section, as ASR rules cannot be applied regarless of configuration
  2. If Defender is active
    2.1 If the systems has no ASR rules active, display "ASR rules not configured"
    2.2 If 1 or more ASR rules are configured, display these including their status (monitor or block)
  3. Exclusions
    3.1If there are no exclusions configured, display "no ASR rules exclusions configured"
    3.2 If 1 or more exclusions are configured, display those

references for ASR rules compatibility for relevant OSes: here
We only need Windows 10/11 & Server 2016/2019/2022

Get some inspiration from ASR Analyzer which has a nice implementation for displaying active rules and exclusions

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions