Just another DLL library built to knockout (bypass) AMSI (Antimalware Scan Interface) and ETW (Event Tracing for Windows) at the same time (so they don't bother you while you do evil things). Based on RastaMouse AmsiBypass and Brendan's Ortiz article on how to bypass AV and EDR.
I have added Powershell script you can use to load the DLL directly to the memory.
LongWayHomie/Invoke-Knockout
Folders and files
| Name | Name | Last commit date | ||
|---|---|---|---|---|