RSSAmplifier

am0nsec · Mar 16, 2020

AMSI Module In-Memory Patch

0
Sign in to vote or save

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.

0x00 Abstract The 12th Jun 2019 I wrote a paper about the Anti-Malware Scan Interface technology. At this time, the objective was to dig into the AMSI internals in order to, firstly, understand how the technology works and, secondly, how it is possible to bypass AMSI by carrying out an in memory module function patching. This paper will not provide more information about AMSI and the patch will be…

Read on /posts/2020/03/00000000/

Comments

Nothing yet. Say the first thing.

    Sign in to join the conversation.