GHOSTING-AMSI

Summary from the TLDR InfoSec newsletter

A PowerShell script that provides an AMSI Bypass via RPC Hijack, which exploits the COM-level mechanics that AMSI uses when delegating scan requests to antivirus providers.