Description
This detection identifies malware that attempts to disable the Windows Antimalware Scan Interface (AMSI) to evade security scanning.
Stats
- First seen
- August 2022
- Last seen
- September 2026
Alert name variants
| Alert Name |
|---|
| Generic.Amsi.Disable.C.98A0A7E8 |
| Script-PowerShell.Trojan.Disable |
| Script.Trojan.Disable |
| Text.Trojan.Disable |