Skip to content

Windows: reduce false positives on Suspicious PowerShell (AMSI Bypass) rule#2311

Merged
Kbayero merged 1 commit into
v11from
feature/powershell-amsi-bypass-fp-tuning
Jul 7, 2026
Merged

Windows: reduce false positives on Suspicious PowerShell (AMSI Bypass) rule#2311
Kbayero merged 1 commit into
v11from
feature/powershell-amsi-bypass-fp-tuning

fix(rules/windows): exclude benign AMSI 'sentinel' harness from Power…

4365211
Select commit
Loading
Failed to load commit list.

Select a check to view from the sidebar