Blocked by Defender as Posmegz.A

[red-erik]

Hello,
this is what we are receiving:

Name: VirTool:PowerShell/Posmegz.A
ID: 2147962837
Severity: Severe
Category: Tool
Path: amsi:_R:\PowerHuntShares\PowerHuntShares-main\PowerHuntShares.psm1
Detection Origin: Unknown
Detection Type: Concrete
Detection Source: AMSI
User: NT AUTHORITY\SYSTEM
Process Name: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Security intelligence Version: AV: 1.445.25.0, AS: 1.445.25.0, NIS: 1.445.25.0
Engine Version: AM: 1.1.26010.1, NIS: 1.1.26010.1

Regards,
Red.

[fgeek]

@red-erik have you been able to resolve this issue ? or any workaround?

It's a security testing tool. I don't think there is anything anyone can do if it is detected by antivirus other than trying evasion if that is something you are looking to do. AV vendors are obviously adding signatures for tools like these.