Awesome

ASRenum

Identify ASR rules, actions, and exclusion locations

Thanks to EspressoCake

ASRenum-BOF.cpp/.cna

$ make all

• load cna

ASRenum.cpp

• initial script

ASRenum.cs

beacon> inlineExecuteAssembly --dotnetassembly C:\Tools\ASRenum.exe

beacon> bofnet_executeassembly ASRenum