Advice Request Norton & AMSI

[notabot]

Which Norton/Symantec products support AMSI ?

EDIT: though I see nice marketing & research pdfs from Symantec on AMSI, I don't see any mention of AMSI related to their products, which I interpret as no AMSI support (if someone knows more, please feel free to post !).

 

[Venustus]

Which Norton/Symantec products support AMSI ?

EDIT: though I see nice marketing & research pdfs from Symantec on AMSI, I don't see any mention of AMSI related to their products, which I interpret as no AMSI support (if someone knows more, please feel free to post !).

No evidence to suggest that it does:
Lee Holmes

 

[notabot]

No evidence to suggest that it does:
Lee Holmes

Awesome, this is actually a very useful list, many thanks !

Do you know which vendors support ELAM as well ? Overview of Early Launch AntiMalware - Windows drivers

 

[Venustus]

Awesome, this is actually a very useful list, many thanks !

You're welcome
Most do!
You can check to see if you have an elam driver in Win folder

 

[motox781]

What are the advantages of AV's using AMSI?

 

[Venustus]

What are the advantages of AV's using AMSI

How AMSI helps you defend against malware - Win32 apps

As an application developer, you can actively participate in malware defense. Specifically, you can help protect your customers from dynamic script-based malware, and from non-traditional avenues of cyber attack.

docs.microsoft.com

Windows News and Insights | Microsoft Security Blog

Read the latest news and insights about Windows from Microsoft's team of experts at Microsoft Security Blog.

www.microsoft.com

 

[93803123]

Awesome, this is actually a very useful list, many thanks !

Do you know which vendors support ELAM as well ? Overview of Early Launch AntiMalware - Windows drivers

Hah, hah. Dr Web AMSI integration was really bad when I tested it about a year ago. And no, they don't make ongoing tweaks and refinements. None of them really do.

There is no reason whatsoever to assume that any of the vendors improved significantly since the MRG Effitas testing.

You guys are getting all excited, thinking that you will get a good protection out of AMSI. Wrong.

 

[93803123]

Awesome, this is actually a very useful list, many thanks !

Do you know which vendors support ELAM as well ? Overview of Early Launch AntiMalware - Windows drivers

There's an old thread over at Wilders ELAM (Early Launch Antimalware) and AVs supporting it

 

[notabot]

There's an old thread over at Wilders ELAM (Early Launch Antimalware) and AVs supporting it

Thanks !