AV Evasion

AMSI Bypass

• AMSI Bypass – How it works - mdsec

• Amsi-Bypass-Powershell

• Making AMSI Jump - Offensive Defence

• The RIse and Fall of AMSI - Tal Liberman

• OffensiveNim - AMSI Patch

• Hunting for AMSI bypasses- Wee-Jing Chung

• Using Reflection for AMSI Bypass - redteam cafe

• AMSI Fail

• Memory Patching AMSI Bypass

• How to bypass AMSI and execute ANY malicious Powershell code

• Introduction to Sandbox Evasion and AMSI Bypasses - Jake Krasnov, Anthony Rose, Vincent Rose

• Evading Detection: A Beginner's Guide to Obfuscation

• Exploring PowerShell AMSI and Logging Evasion

• AMSITrigger v3

• Bypass AMSI by manual modification

Resources

HoloTryHackMe

TryHackMe - Holo