In the Carbon Black EDR console, you can enable AMSI events in the Event Forwarder by checking the ingress.event.filelessscriptload option.
See "Configuring the Event Forwarder" in the VMware Carbon Black EDR User Guide.
In the Carbon Black EDR console, you can enable AMSI events in the Event Forwarder by checking the ingress.event.filelessscriptload option.
See "Configuring the Event Forwarder" in the VMware Carbon Black EDR User Guide.