https://github.com/shuttle/shuttle.amsi
Integrates with the anti-malware scan interface to scan content.
https://github.com/shuttle/shuttle.amsi
Last synced: about 2 months ago
JSON representation
Integrates with the anti-malware scan interface to scan content.
- Host: GitHub
- URL: https://github.com/shuttle/shuttle.amsi
- Owner: Shuttle
- License: bsd-3-clause
- Created: 2020-10-05T05:30:36.000Z (over 4 years ago)
- Default Branch: master
- Last Pushed: 2020-10-10T09:16:56.000Z (over 4 years ago)
- Last Synced: 2025-02-02T07:28:53.041Z (4 months ago)
- Language: C#
- Size: 19.5 KB
- Stars: 0
- Watchers: 3
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Shuttle.Amsi
Integrates with the Windows (10, 2016+) anti-malware scan interface that uses the registered provider to scan content for malware.
## Usage
```c#
var context = new AmsiContext("ApplicationName");
```
The `applicationName` argument is optional and a `Guid` will be assigned as the name if none is specified.
## Methods
```c#
public bool AmsiContext.IsAvailable();
```
Returns `true` if an AMSI provider has been registered; else `false`. This is achieved by scanning the standard EICAR test string.
```c#
public bool HasMalware(Stream stream, string contentName);
public bool HasMalware(byte[] bytearray, string contentName);
```
Returns `true` if the `stream` or `bytearray` contains malware; else `false`.