CCRTS
CREST Certified Red Team Specialist (CCRTS)
EvasionEnglish
Exam overviewPractice session
An operator wants to bypass Windows Defender AMSI (Antimalware Scan Interface) before loading a PowerShell-based implant. Which technique directly patches the AmsiScanBuffer function in memory?
Loading your practice session…