AMSI patching

AMSI patching refers to a post-exploitation bypass technique for AMSI in which the attacker patches the AmsiScanBuffer function in memory to force it to return a clean result, effectively disabling script scanning.

---