Event Forwarder Settings

In the Carbon Black EDR console, you can enable AMSI events in the Event Forwarder by checking the ingress.event.filelessscriptload option.

See "Event Forwarder" in the VMware Carbon Black EDR User Guide.