unknown 11062bfa88 New tools update		%!s(int64=2) %!d(string=hai) anos
..
README.md	11062bfa88 New tools update	%!s(int64=2) %!d(string=hai) anos
beacon.h	11062bfa88 New tools update	%!s(int64=2) %!d(string=hai) anos
bofcompile.bat	11062bfa88 New tools update	%!s(int64=2) %!d(string=hai) anos
enumsecproducts.c	11062bfa88 New tools update	%!s(int64=2) %!d(string=hai) anos
enumsecproducts.cna	11062bfa88 New tools update	%!s(int64=2) %!d(string=hai) anos
enumsecproducts.h	11062bfa88 New tools update	%!s(int64=2) %!d(string=hai) anos
enumsecproducts.o	11062bfa88 New tools update	%!s(int64=2) %!d(string=hai) anos

EnumSecProducts

Get a list of security products (like AV/EDR) that are running on the system. This is done by comparing running processes against a hardcoded list of 130 security products.

Usage

enumsecproducts

Compile

1. Make sure Visual Studio is installed and supports C/C++.
2. Open the x64 Native Tools Command Prompt for VS <2019/2022> terminal.
3. Run the bofcompile.bat script to compile the object file.
4. In Cobalt strike, use the script manager to load the .cna script to import the tool.