search

microsoft / CSS-Exchange

Exchange Server support tools and scripts
MIT License
1.21k stars 333 forks source link

Under some specific circumstances test is not detected correctly #2025

Closed iserrano76 closed 4 months ago

iserrano76 commented 4 months ago

Issue: Under some circumstances the AMSI request in the test is not detected correctly.

Reason: Avoid false positives.

Fix: Change the way we do the test request.

Validation: Test in lab.

dpaulson45 commented 4 months ago

Please explain why doing it this way avoids the false positives from occurring. It just looks like we are making the URL request stream more complex is all.