Tag: AMSI

Windows AMSI (AntiMalware Scan Interface) bypass

~ hucktech ~ Leave a comment

https://twitter.com/aionescu/status/964953997311328256

http://standa-note.blogspot.ca/2018/02/amsi-bypass-with-null-character.html

https://msdn.microsoft.com/en-us/library/windows/desktop/dn889587(v=vs.85).aspx

See-also:

https://www.cyberark.com/threat-research-blog/amsi-bypass-patching-technique/