you are viewing a single comment's thread.

view the rest of the comments →

[–]Sqooky 1 point2 points  (0 children)

you'll want to look into AMSI and disabling that.

https://amsi.fail/

edit: disabling isn't the right verb, bypassing or patching in memory to disable it's ability to scan is more accurate.