Trellix: Exploit Prevention Content Version Update 13123 for Endpoint Security and Host Intrusion Prevention Now Available

Exploit Prevention Content version update 13123 for Endpoint Security (ENS) and Host Intrusion Prevention (Host IPS) is now available.

This update was posted to the update repository on October 11, 2023.

Summary of this release:

1. New signature 6266: T1562 - AMSI Bypass - AmsiScanString Memory Patch (applicable on both ENS and Host IPS)
2. New signature 6267: T1036 - Masquerading PowerShell via PEB (applicable on both ENS and Host IPS)

For more information, see the Release Notes.