PowerShell module providing CmdLet for getting human readable information about attack surface reduction rules configured on a Windows Defender client

ASRRules is a module that will help view and modify Attack Surface Reduction Rules provided by Windows Defender

Provides classes and functions for TMConsole.

Dargslan.WinDefenderATP — Microsoft Defender for Endpoint status toolkit — advanced threat protection monitoring, attack surface reduction rules, controlled folder access, and exploit protection (2026 Edition)

Attack Surface Reduction rules management toolkit — ASR rule inventory, action states, exclusions, block events, and compliance reporting

Audit Microsoft Defender configuration, ASR rule state, exclusions and tamper protection. JSON / HTML compliance report.

Comprehensive Windows security posture analysis and attack surface assessment tool. Covers 23 security categories including hardware security (TPM/VBS/Secure Boot), BitLocker, Microsoft Defender ASR rules, exploit protection, privacy settings, network security, remote access, WSL, PowerShell security, authentication policy, scheduled tasks, and Win... More info

WPF-based operator dashboard. Enter a target computer name; the tool connects over PowerShell Remoting (WinRM) and collects a holistic snapshot of native Microsoft security tooling and identity state: - Microsoft Defender AV: engine/platform/signature versions, last signature sync, real-time protection, tamper protection, cloud (MAPS) settin... More info