https://github.com/katahiromz/amsiscanner
Threat detector for Windows 10
https://github.com/katahiromz/amsiscanner
amsi scanner threat-analysis virus-scanning win32 win32api windows windows-10
Last synced: 3 months ago
JSON representation
Threat detector for Windows 10
- Host: GitHub
- URL: https://github.com/katahiromz/amsiscanner
- Owner: katahiromz
- License: mit
- Created: 2019-04-12T10:32:19.000Z (about 7 years ago)
- Default Branch: master
- Last Pushed: 2019-05-10T11:18:58.000Z (about 7 years ago)
- Last Synced: 2025-11-30T09:51:25.255Z (7 months ago)
- Topics: amsi, scanner, threat-analysis, virus-scanning, win32, win32api, windows, windows-10
- Language: C++
- Homepage:
- Size: 58.6 KB
- Stars: 3
- Watchers: 2
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.txt
Awesome Lists containing this project
README
# AmsiScanner by katahiromz
## What's this?
This library provides C/C++ threat detector for Windows 10 applications by using the AMSI (Antimalware Scan Interface) component of Windows 10.
Windows 10 contains `amsi.dll` DLL file, that provides AMSI.
This library supports ADS (alternate data stream).
## Files
File `pamsi.h` is a portable C/C++ AMSI header.
File `pamsixx.hpp` provides a C++ `PAMSIXX` class that manipulates the AMSI API using `amsi.dll` file.
Class `AmsiScanner` of `AmsiScanner.hpp` and `AmsiScanner.cpp` files provides a C++ high-level scanner interface for AMSI.
File `amsiscan.cpp` implements a test program of `AmsiScanner` class.
## NOTICE
The AMSI interface might change in future.
katayama.hirofumi.mz@gmail.com