Forum Discussion
How to test ASR policy AsrPsexecWmiChildProcessAudited ?
Hi Team, I want to test the ASR policy in my environment. Could someone help me with test scripts or commands to test ASR "AsrPsexecWmiChildProcessAudited" policy? I surfed lot not getting exact s...
What OS platform and SKU are you planning to use for testing? Are the devices managed by any enterprise solution?
Yes devices are managed by enterprise solution. Currently I'm testing in Windows 10 21H2 Machine.
- What edition of Windows 10? ASR support is limited in PRO edition. Also, what tool are using to manage the devices? Intune? Configuration manager? or non Microsoft solution?
- Thanks for the swift response. We are using windows 10 enterprise everything is configured using Intune. We just need to see the ASR "AsrPsexecWmiChildProcessAudited" results in Microsoft 365 Defender by executing some commands, for that I need some PowerShell scripts or commands. Could you please guide me?
- Grand, so are you trying to simulate results or push down the auditing policy or both?