Support AMSI and AM-PPL Feature on Windows 10

Snatch

https://msdn.microsoft.com/en-us/library/windows/desktop/dn889587(v=vs.85).aspx

https://msdn.microsoft.com/en-us/library/windows/desktop/dn313124(v=vs.85).aspx

 

AM processes can run critical user-mode service components as AM-PPL which is at a higher level than an Admin thus can help shield itself from admin level malware.

 

The two features will prevent F-secure process from virus attacking, and improve self-protection.As I known, Avast, AVG, Kaspersky, ESET and Trend Micro have supported this feature on Windows 10.

 

Such as KIS 2019:

 

 

Cale

Hi,

Both supported already for some time. Closing case.

-Cale