******************************************************************************
*/
+/*
+ ******************************************************************************
+ * BEGIN AMSI Fileless goodies.
+ */
+
+/**
+ * Defines the string used for vsep plugin AMSI Fileless config file group
+ */
+#define CONFGROUPNAME_AMSI "giamsi"
+
+/* Default state of AMSI config*/
+#define VSEP_DEFAULT_AMSI_STATE FALSE
+
+/**
+ * Defines user-defined maximum AMSI client connections.
+ */
+#define CONFNAME_AMSI_MAX_CLIENT_CONNECTIONS "amsi-max-client-connections"
+
+/**
+ * Defines user-defined maximum script size supported in fileless.
+ */
+#define CONFNAME_AMSI_MAX_SCRIPT_SIZE_IN_BYTES "amsi-max-script-size-in-bytes"
+
+/*
+ * END Fileless goodies.
+ ******************************************************************************
+ */
+
/*
******************************************************************************
* BEGIN CarbonBlack helper plugin goodies.
# By default the gitray plugin is enabled
# To disable gitray user plugin set
#enabled=false
+
+[giamsi]
+
+# The giamsi plugin for the Windows AntiMalware Scan Interface (AMSI) configuration.
+
+# By default the fileless AMSI is disabled.
+# To enable the AMSI plugin set
+#enabled=true
+
+# By default, the maximum client connections supported is 8.
+# The values in range are 8<amsi-max-client-connections<128.
+# If any value less than 8, the configuration parser rejects the value
+# and set as minimum supported (i.e., 8).
+# If any value greater than 128, the parser module rejects the value
+# and set the max supported value (i.e., 128).
+# To change the number of concurrent client connections supported.
+#amsi-max-client-connections=16
+
+# By default, the maximum script size supported is 4096 bytes
+# The range of values supported are 4096<amsi-max-script-size-in-bytes<65536
+# If any value less than 4096, the configuration parser rejects the value
+# and set as minimum supported (i.e. 4096).
+# If any value greater than 65536, the parser module rejects the value
+# and set the max supported value (i.e. 65536).
+# To change the amsi script buffer size.
+#amsi-max-script-size-in-bytes=16536
\ No newline at end of file