for Windows
The AMSI Protection component is intended to support Antimalware Scan Interface from Microsoft. Antimalware Scan Interface (AMSI) allows third-party applications with AMSI support to send objects (for example, PowerShell scripts) to Kaspersky Endpoint Security for an additional scan, and then receive the results from scanning these objects. Third-party applications may include, for example, Microsoft Office applications (see the figure below). For details on AMSI, please refer to the Microsoft documentation.
AMSI Protection can only detect a threat and notify a third-party application about the detected threat. A third-party application, after receiving a notification of a threat, does not allow the malicious actions (for example, it terminates the action).
AMSI Protection is available for the following operating systems for workstations and servers: