AMSI integration
Datto EDR now integrates with Windows Antimalware Scan Interface (AMSI) to expand visibility into script-based activity and improve detection coverage for fileless attacks. This helps you spot suspicious PowerShell and other scripting engine activity that can otherwise blend into normal admin work.
The Windows EDR agent adds AMSI detection components in a dedicated AMSI directory within the agent install path (including amsi.dll, keywords.enc, and damsi.sha). AMSI support is designed to inspect script content and alert on risky patterns, including interactive command activity and malicious keywords before execution.
One Complete Platform for IT & Security Management
Kaseya 365 is the all-in-one solution for managing, securing, and automating IT. With seamless integrations across critical IT functions, it simplifies operations, strengthens security, and boosts efficiency.
Fake voicemails, real malware: Inside a 26,000-email SVG smuggling campaign
Download now
What sets the world's top MSPs apart?
Download now
Microsoft security challenges: How to protect your business, data and identity
Discover the biggest Microsoft security challenges and learn practical strategies to protect your users, data, identities and business from evolving threats.
Download now