New AMSI Bypass Using CLR Hooking

In this article, I will present a new technique to bypass Microsoft’s Anti-Malware Scan Interface (AMSI) using API Call Hooking of CLR methods.

https://practicalsecurityanalytics.com/new-amsi-bypass-using-clr-hooking/