AMSI integration

April 16
New
Datto EDR, Kaseya 365 Endpoint

Datto EDR now integrates with Windows Antimalware Scan Interface (AMSI) to expand visibility into script-based activity and improve detection coverage for fileless attacks. This helps you spot suspicious PowerShell and other scripting engine activity that can otherwise blend into normal admin work.

The Windows EDR agent adds AMSI detection components in a dedicated AMSI directory within the agent install path (including amsi.dll, keywords.enc, and damsi.sha). AMSI support is designed to inspect script content and alert on risky patterns, including interactive command activity and malicious keywords before execution.

Learn more about AMSI integration for Datto EDR here

One complete platform for IT & security management

Kaseya 365 is the all-in-one solution for managing, securing, and automating IT. With seamless integrations across critical IT functions, it simplifies operations, strengthens security, and boosts efficiency.

Get a demo Explore Kaseya 365

Microsoft security challenges: How to protect your business, data and identity

Microsoft has evolved far beyond productivity software. Today, it powers nearly every aspect of modern business — from collaboration and

Read blog post

How MSPs could become a ‘critical supplier’ under new UK legislation 

Even if MSPs are not directly regulated, there’s a second way The UK’s Cyber Security and Resilience Bill may affect them  In part one of

Read blog post

Email security under NIS2 

With evolving AI threats, traditional defences are no longer enough  Email has long been a point of vulnerability for businesses, but the scale and sophistication of attacks are evolving, posing

Read blog post