Finally got around to publishing some content on AMSI bypasses for C#/Powershell/VBA:
@byte_St0rm/adventures-in-the-wonderful-world-of-amsi-25d235eb749c?sk=783401b86eedc1c2c7b93be4322b2730" target="_blank" rel="nofollow noopener">medium.com/@byte_St0rm/ad…
Because @mysmartlogon and I worked very hard, you'll be happy to know that #mimikatz DCShadow (and DCSync, of course) are working like hell with latest Windows Server 2019 as DC🤘
(never do like in the demo, really 😉)
> github.com/gentilkiwi/mim…
> dcshadow.com