RED TEAMING

NTLM

KERBEROS

SMB

AMSI

The AMSI feature is integrated into the following components of Windows 10:

User Account Control, or UAC (elevation of EXE, COM, MSI, or ActiveX installation) PowerShell (scripts, interactive use, and dynamic code evaluation) Windows Script Host (wscript.exe and cscript.exe) JavaScript and VBScript Office VBA macros

Application Restriction

C:\Windows\Microsoft.NET\Framework\v4.0.30319 \InstallUtil.exe /logfile= /LogToConsole=false /U script.exe

msbuild.exe