BC Security
Blogs, Articles, and Posts
Microsoft pushed a new detection capability for AMSI/Defende
(twitter.com)
Image on the left shows how executing a stored variable with IEX used to bypass AMSI and the right
By: BC-Security submitted:Jun 15 2022
Image on the left shows how executing a stored variable with IEX used to bypass AMSI and the right
shows how it's now detected. IEX now appears to have a new Fully Qualified Error ID.
By: BC-Security submitted:Jun 15 2022
Fun
The face you make when someone says PowerShell is dead.
(twitter.com)
Glad I don't know any of those people.
By: BC Security submitted:Jun 16 2022
Glad I don't know any of those people.
By: BC Security submitted:Jun 16 2022