Record · corpus.blog/posts/01a0d3fa-9a55-71d3-883b-763fab683ffe

Defensive Technology: Antimalware Scan Interface (AMSI)

text/plain – ericlaw talks about security, the web, and software in general · published 25 October 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at textslashplain.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 27
Words captured: 1,168

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

Cloaking, Detonation, and Client-side Phishing Detection Read at the source ↗

textslashplain.com

https://www.youtube.com/watch?v=DYWPtt7qszY&t=2725s

youtube.com

https://github.com/dotnet/runtime/blob/main/src/coreclr/vm/amsi.cpp

github.com

https://learn.microsoft.com/en-us/windows/security/application-security/application-control/user-account-control/how-it-works

learn.microsoft.com

https://learn.microsoft.com/en-us/windows/win32/wmisdk/wmi-classes

learn.microsoft.com

https://learn.microsoft.com/en-us/windows-server/storage/file-server/volume-shadow-copy-service

learn.microsoft.com

https://learn.microsoft.com/en-us/sharepoint/security-for-sharepoint-server/configure-amsi-integration

learn.microsoft.com

https://www.microsoft.com/en-us/security/blog/2025/04/09/stopping-attacks-against-on-premises-exchange-server-and-sharepoint-server-with-amsi/

microsoft.com

https://www.microsoft.com/en-us/security/blog/2018/09/12/office-vba-amsi-parting-the-veil-on-malicious-macros/

microsoft.com

https://learn.microsoft.com/en-us/defender-endpoint/attack-surface-reduction-rules-reference?view=o365-worldwide

learn.microsoft.com

https://i0.wp.com/textslashplain.com/wp-content/uploads/2024/10/image-13.png?ssl=1

i0.wp.com

Attack Techniques: Full-Trust Script Downloads Read at the source ↗

textslashplain.com

https://learn.microsoft.com/en-us/windows/win32/amsi/how-amsi-helps

learn.microsoft.com

https://learn.microsoft.com/en-us/defender-endpoint/malware/fileless-threats

learn.microsoft.com

https://learn.microsoft.com/en-us/windows/win32/amsi/antimalware-scan-interface-portal

learn.microsoft.com

https://github.com/Microsoft/Windows-classic-samples/tree/main/Samples/AmsiProvider

github.com

https://github.com/microsoft/Detours

github.com

https://blogs.windows.com/windowsexperience/2024/09/12/taking-steps-that-drive-resiliency-and-security-for-windows-customers/

blogs.windows.com

Security Tradeoffs: Privacy Read at the source ↗

textslashplain.com

First Look: Apple’s NEURLFilter API Read at the source ↗

textslashplain.com

Browser Extensions: Powerful and Potentially Dangerous Read at the source ↗

textslashplain.com

https://learn.microsoft.com/en-us/defender-vulnerability-management/tvm-browser-extensions

learn.microsoft.com

Web-to-App Communication: App Protocols Read at the source ↗

textslashplain.com

https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/ntddk/nf-ntddk-pssetcreateprocessnotifyroutine

learn.microsoft.com

Participatory Extensible Security Read at the source ↗

textslashplain.com

https://learn.microsoft.com/en-us/windows/win32/services/protecting-anti-malware-services-

learn.microsoft.com

https://learn.microsoft.com/en-us/defender-xdr/virus-initiative-criteria

learn.microsoft.com