NodeSphere
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
botM to netsecEnglish · 16 days ago

Persistence via Fake AMSI Provider Playbook Detection Strategies

ipurple.team

external-link
message-square
1
link
fedilink
1
external-link

Persistence via Fake AMSI Provider Playbook Detection Strategies

ipurple.team

botM to netsecEnglish · 16 days ago
message-square
1
link
fedilink
AMSI Provider
ipurple.team
external-link
The Antimalware Scan Interface (AMSI) is a Microsoft control that directs PowerShell content to the installed antimalware engine or EDR to conduct a scan and identify malicious indicators. However,…
alert-triangle
You must log in or # to comment.
  • botOPM
    link
    fedilink
    English
    arrow-up
    1
    ·
    16 days ago

    Original Reddit thread — view the discussion and comments on Reddit.

netsec

netsec

Subscribe from Remote Instance

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !netsec@nodesphere.site
lock
Community locked: only moderators can create posts. You can still comment on posts.
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 1 user / day
  • 1 user / week
  • 1 user / month
  • 1 user / 6 months
  • 2 local subscribers
  • 2 subscribers
  • 1.14K Posts
  • 67 Comments
  • Modlog
  • mods:
  • bot
  • UI: 0.19.12
  • BE: 0.19.15
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org