Advice Request Norton & AMSI

Please provide comments and solutions that are helpful to the author of this topic.
N

notabot

Level 15
Thread author
Verified
Oct 31, 2018
703
2,047
1,368
Which Norton/Symantec products support AMSI ?

EDIT: though I see nice marketing & research pdfs from Symantec on AMSI, I don't see any mention of AMSI related to their products, which I interpret as no AMSI support (if someone knows more, please feel free to post !).
 
Last edited:
  • Like
Reactions: DeepWeb, Venustus, AYIZEB and 1 other person
notabot said:
Which Norton/Symantec products support AMSI ?

EDIT: though I see nice marketing & research pdfs from Symantec on AMSI, I don't see any mention of AMSI related to their products, which I interpret as no AMSI support (if someone knows more, please feel free to post !).
Click to expand...
No evidence to suggest that it does:
Lee Holmes
D1j476HVAAEYjYB.png:large
 
Last edited:
  • Like
Reactions: DeepWeb, upnorth, catjc and 4 others
motox781 said:
What are the advantages of AV's using AMSI
Click to expand...
docs.microsoft.com

How AMSI helps you defend against malware - Win32 apps

As an application developer, you can actively participate in malware defense. Specifically, you can help protect your customers from dynamic script-based malware, and from non-traditional avenues of cyber attack.
docs.microsoft.com
www.microsoft.com

Windows News and Insights | Microsoft Security Blog

Read the latest news and insights about Windows from Microsoft's team of experts at Microsoft Security Blog.
www.microsoft.com
 
  • Like
Reactions: oldschool, Burrito, upnorth and 5 others
notabot said:
Awesome, this is actually a very useful list, many thanks !

Do you know which vendors support ELAM as well ? Overview of Early Launch AntiMalware - Windows drivers
Click to expand...

Hah, hah. Dr Web AMSI integration was really bad when I tested it about a year ago. And no, they don't make ongoing tweaks and refinements. None of them really do.

There is no reason whatsoever to assume that any of the vendors improved significantly since the MRG Effitas testing.

You guys are getting all excited, thinking that you will get a good protection out of AMSI. Wrong.
 
Last edited by a moderator:
  • Like
Reactions: Burrito, Venustus, oldschool and 1 other person

You may also like...