Microsoft Windows AMSI
This pack includes Cortex XSIAM content.
This pack requires an XDR Agent to be installed on the relevant endpoints.
Microsoft Windows AMSI
- Details
- Content
- Dependencies
- Version History
The Windows Antimalware Scan Interface (AMSI) is a security feature in Windows OSs that allows services to scan for files, memory and other data for threats.
Modeling Rules
| Name | Description |
|---|---|
Microsoft Windows AMSI Security Modeling Rule |
Parsing Rules
| Name | Description |
|---|---|
Microsoft Windows AMSI Parsing Rule |
1.0.1 - 6204823 (August 31, 2023)
- 29354
Modeling Rules
Microsoft Windows AMSI Security Modeling Rule
Updated the Modeling Rule schema with additional fields.
- 29354
1.0.0 - 6200580 (August 10, 2023)
The Windows Antimalware Scan Interface (AMSI) is a security feature in Windows OSs that allows services to scan for files, memory and other data for threats.
PUBLISHER
PLATFORMS
Cortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | August 10, 2023 | |
| Last Release | August 31, 2023 |