I am looking for the same - any progress here?
Which MEM ASR rule triggers "AsrUntrustedExecutableBlocked"?

ActionType:
AsrUntrustedExecutableBlocked
FileName:
gpo-client.exe
FolderPath:
C:\Master\GPO\bin

Thanks.

John
We support Ukraine and condemn war. Push Russian government to act against war. Be brave, vocal and show your support to Ukraine. Follow the latest news HERE