A sensor event called the fileless scriptload event is recorded by the Windows sensor. Overview of AMSIAMSI support is available as a beta feature in Carbon Black EDR 7.2 and later releases, together with the Windows 7.1+ sensor. Using AMSI with Carbon Black EDR (beta)AMSI events can be forwarded through the Event Forwarder in JSON and LEEF.
