Null-AMSI. Null-AMSI is an AMSI and ETW bypass that takes advantage of .NET types (.NET Reflection) to bypassing AV/EDR.

github.com/a7t0fwa7/Null-AMSI

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

No recent activity.