Getting PowerShell Empire Past Windows Defender

This guest blog post explains how an operator can use SharpSploit and SharpGen to evade Windows Defender by leveraging an AMSI bypass and packaging PowerShell Empire launchers into .NET executables; it includes build commands, resource/config edits (disabling PowerKatz), running a Base64 Empire launcher, and operational recommendations for HTTPS, valid certificates, domain selection, and application whitelisting bypasses. The post also notes that Windows Defender added detection for this AMSI tampering (AmsiTamper.A).