UtilDebugBypassAmsi Method

Patch the AmsiScanBuffer function in amsi.dll file to bypass Anti-malware Scan Interface.

Definition

Namespace: DevCase.Core.Diagnostics.Debugging.Common
Assembly: DevCase.net48 (in DevCase.net48.dll) Version: 6.0.0.0 (6.0)
XMLNS for XAML: Not mapped to an xmlns.
public static void BypassAmsi()

Remarks

Code has been adapted from Adam Chester: https://blog.xpnsec.com/hiding-your-dotnet-etw/ and Mythic Atlas: https://github.com/its-a-feature/Mythic/tree/master/Payload_Types/atlas

See Also