VQL Reference Windows amsi amsi Function Arg Description Type string A string to scan string (required) Description AMSI is an interface on windows to scan a string for malware. This function submits the string to the AMSI system and receives a determination if it is malware.