Enumerations/AMSI_RESULT.ps1
$AMSI_RESULT = psenum $Module AMSI.AMSI_RESULT UInt32 @{ AMSI_RESULT_CLEAN = 0 AMSI_RESULT_NOT_DETECTED = 1 AMSI_RESULT_BLOCKED_BY_ADMIN_START = 16384 AMSI_RESULT_BLOCKED_BY_ADMIN_END = 20479 AMSI_RESULT_DETECTED = 32768 } |