Microsoft-Antimalware-Scan-Interface
1 events across 1 channel
| Event ID | Title | Channel |
|---|---|---|
| 1101 | AmsiScanBuffer | Debug |
Event ID 1101 — AmsiScanBuffer
Description
AmsiScanBuffer.
Message #
Fields #
| Name | Description |
|---|---|
session Pointer | — |
scanStatus UInt8 | — |
scanResult UInt32 | — |
appname UnicodeString | — |
contentname UnicodeString | — |
contentsize UInt32 | — |
originalsize UInt32 | — |
content Binary | — |
hash Binary | — |
contentFiltered Boolean | — |
hashoriginalcontent Binary | — |
Example Event #
{
"system": {
"provider": "Microsoft-Antimalware-Scan-Interface",
"guid": "{2a576b87-09a7-520e-c21a-4942f0271d67}",
"event_source_name": "",
"event_id": "1101",
"version": "0",
"level": "4",
"task": "0",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T04:33:37.197768500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "5820",
"thread_id": "11756"
},
"channel": "AMSI/Debug",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"session": "0x4D64",
"scanStatus": "2",
"scanResult": " 1",
"appname": "PowerShell_C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe_10.0.20348.1",
"contentname": "C:\\Users\\domainadmin\\Desktop\\automaton\\onedrive_etw_capture.ps1",
"contentsize": " 7902",
"originalsize": " 7902",
"content": "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",
"hash": "0x6F48D9342BD4253686B353DA4B67D0D8363019217A4BB6F32824276954F7626D",
"contentFiltered": "false"
},
"message": ""
}