Microsoft Windows AMSI v1.0.7
The Windows Antimalware Scan Interface (AMSI) is a security feature in Windows OSs that allows services to scan for files, memory and other data for threats.
- Author:
- Cortex XSOAR
- Support:
- xsoar
xsiam
Analytics & SIEM
Modeling rules (1)
Parsing rules (1)
README
Microsoft Windows AMSI
This pack includes Cortex XSIAM content.
<~XSIAM>
This pack requires an XDR Agent to be installed on the relevant endpoints.