# AMSI Bypass

We can try if AMSI is enabled with  `amsiutils`

<figure><img src="https://3102775947-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtdpPOfQCtjA9B0aRq6bf%2Fuploads%2F15PgpZySdYkB3MlXSoKe%2Fimage.png?alt=media&#x26;token=d9212de7-2cec-4bc5-9569-ee1b16c90737" alt=""><figcaption></figcaption></figure>

Use the code block here,

* <https://github.com/S3cur3Th1sSh1t/Amsi-Bypass-Powershell#modified-amsi-scanbuffer-patch>

<figure><img src="https://3102775947-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtdpPOfQCtjA9B0aRq6bf%2Fuploads%2FdVvO6ki3JuF6QjMhz4nq%2Fimage.png?alt=media&#x26;token=895781db-e096-4ef4-8678-5c5e57ba9f93" alt=""><figcaption></figcaption></figure>