{"id":14245,"date":"2026-02-23T13:53:00","date_gmt":"2026-02-23T19:53:00","guid":{"rendered":"https:\/\/amiti.org.mx\/?p=14245"},"modified":"2026-02-24T13:54:48","modified_gmt":"2026-02-24T19:54:48","slug":"cuando-windows-deja-de-ver-el-ataque","status":"publish","type":"post","link":"https:\/\/amiti.org.mx\/en\/14245\/cuando-windows-deja-de-ver-el-ataque\/","title":{"rendered":"Cuando Windows deja de ver el ataque"},"content":{"rendered":"<p>Autor: Eduardo Salmeron, Cyber Threat Research de Silent4Business<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img fetchpriority=\"high\" decoding=\"async\" width=\"270\" height=\"200\" src=\"https:\/\/amiti.org.mx\/wp-content\/uploads\/2026\/02\/image.png\" alt=\"\" class=\"wp-image-14246\" srcset=\"https:\/\/amiti.org.mx\/wp-content\/uploads\/2026\/02\/image.png 270w, https:\/\/amiti.org.mx\/wp-content\/uploads\/2026\/02\/image-16x12.png 16w\" sizes=\"(max-width: 270px) 100vw, 270px\" \/><\/figure>\n\n\n\n<p><br>AMSI y ETW est\u00e1n dise\u00f1ados para detectar actividad maliciosa en Windows. Pero \u00bfqu\u00e9 sucede cuando el propio sistema es manipulado para \u201cno ver\u201d el ataque? Este an\u00e1lisis muestra c\u00f3mo t\u00e9cnicas en memoria, PowerShell y cifrado permiten desactivar mecanismos de monitoreo sin generar alertas evidentes. No es teor\u00eda: es una t\u00e9cnica real utilizada en escenarios actuales. Si tu estrategia depende de controles nativos, esta lectura puede cambiar tu perspectiva. Descubre c\u00f3mo ocurre y qu\u00e9 implica para tu postura defensiva.Url: https:\/\/blog.silent4business.com\/es\/2026\/02\/05\/evadir-amsi-etw-windows-powershell\/<\/p>","protected":false},"excerpt":{"rendered":"<p>Autor: Eduardo Salmeron, Cyber Threat Research de Silent4Business AMSI y ETW est\u00e1n dise\u00f1ados para detectar actividad maliciosa en Windows. Pero \u00bfqu\u00e9 sucede cuando el propio sistema es manipulado para \u201cno ver\u201d el ataque? Este an\u00e1lisis muestra c\u00f3mo t\u00e9cnicas en memoria, PowerShell y cifrado permiten desactivar mecanismos de monitoreo sin generar alertas evidentes. No es teor\u00eda: [&hellip;]<\/p>\n","protected":false},"author":148,"featured_media":14246,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[],"class_list":["post-14245","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-noticias-amiti"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Cuando Windows deja de ver el ataque - AMITI<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/amiti.org.mx\/en\/14245\/cuando-windows-deja-de-ver-el-ataque\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cuando Windows deja de ver el ataque - AMITI\" \/>\n<meta property=\"og:description\" content=\"Autor: Eduardo Salmeron, Cyber Threat Research de Silent4Business AMSI y ETW est\u00e1n dise\u00f1ados para detectar actividad maliciosa en Windows. Pero \u00bfqu\u00e9 sucede cuando el propio sistema es manipulado para \u201cno ver\u201d el ataque? Este an\u00e1lisis muestra c\u00f3mo t\u00e9cnicas en memoria, PowerShell y cifrado permiten desactivar mecanismos de monitoreo sin generar alertas evidentes. No es teor\u00eda: [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/amiti.org.mx\/en\/14245\/cuando-windows-deja-de-ver-el-ataque\/\" \/>\n<meta property=\"og:site_name\" content=\"AMITI\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/AMITIMex\/?locale=es_LA\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-23T19:53:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-24T19:54:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/amiti.org.mx\/wp-content\/uploads\/2026\/02\/image.png\" \/>\n\t<meta property=\"og:image:width\" content=\"270\" \/>\n\t<meta property=\"og:image:height\" content=\"200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Heidy-O\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@AMITI_Mex\" \/>\n<meta name=\"twitter:site\" content=\"@AMITI_Mex\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Heidy-O\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/14245\\\/cuando-windows-deja-de-ver-el-ataque\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/14245\\\/cuando-windows-deja-de-ver-el-ataque\\\/\"},\"author\":{\"name\":\"Heidy-O\",\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/#\\\/schema\\\/person\\\/09fd614b7d440b5ba06c0480ed768000\"},\"headline\":\"Cuando Windows deja de ver el ataque\",\"datePublished\":\"2026-02-23T19:53:00+00:00\",\"dateModified\":\"2026-02-24T19:54:48+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/14245\\\/cuando-windows-deja-de-ver-el-ataque\\\/\"},\"wordCount\":110,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/14245\\\/cuando-windows-deja-de-ver-el-ataque\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/amiti.org.mx\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/image.png\",\"articleSection\":[\"Noticias AMITI\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/amiti.org.mx\\\/14245\\\/cuando-windows-deja-de-ver-el-ataque\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/14245\\\/cuando-windows-deja-de-ver-el-ataque\\\/\",\"url\":\"https:\\\/\\\/amiti.org.mx\\\/14245\\\/cuando-windows-deja-de-ver-el-ataque\\\/\",\"name\":\"Cuando Windows deja de ver el ataque - AMITI\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/14245\\\/cuando-windows-deja-de-ver-el-ataque\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/14245\\\/cuando-windows-deja-de-ver-el-ataque\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/amiti.org.mx\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/image.png\",\"datePublished\":\"2026-02-23T19:53:00+00:00\",\"dateModified\":\"2026-02-24T19:54:48+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/14245\\\/cuando-windows-deja-de-ver-el-ataque\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/amiti.org.mx\\\/14245\\\/cuando-windows-deja-de-ver-el-ataque\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/14245\\\/cuando-windows-deja-de-ver-el-ataque\\\/#primaryimage\",\"url\":\"https:\\\/\\\/amiti.org.mx\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/image.png\",\"contentUrl\":\"https:\\\/\\\/amiti.org.mx\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/image.png\",\"width\":270,\"height\":200},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/14245\\\/cuando-windows-deja-de-ver-el-ataque\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/amiti.org.mx\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cuando Windows deja de ver el ataque\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/#website\",\"url\":\"https:\\\/\\\/amiti.org.mx\\\/\",\"name\":\"AMITI\",\"description\":\"Mejores empresas TI para M\u00e9xico\",\"publisher\":{\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/amiti.org.mx\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/#organization\",\"name\":\"AMITI\",\"url\":\"https:\\\/\\\/amiti.org.mx\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/amiti.org.mx\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/Amiti_CMYK.png\",\"contentUrl\":\"https:\\\/\\\/amiti.org.mx\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/Amiti_CMYK.png\",\"width\":1161,\"height\":458,\"caption\":\"AMITI\"},\"image\":{\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/AMITIMex\\\/?locale=es_LA\",\"https:\\\/\\\/x.com\\\/AMITI_Mex\",\"https:\\\/\\\/www.instagram.com\\\/amiti_mex\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/amiti-mex\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCaBdZB-k6j-lCH-eTCbLGJw\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/amiti.org.mx\\\/#\\\/schema\\\/person\\\/09fd614b7d440b5ba06c0480ed768000\",\"name\":\"Heidy-O\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6bb82f883f01a117ffeab0847eb3d1e1bc043d3f57c214a17dde7220e395cb0d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6bb82f883f01a117ffeab0847eb3d1e1bc043d3f57c214a17dde7220e395cb0d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6bb82f883f01a117ffeab0847eb3d1e1bc043d3f57c214a17dde7220e395cb0d?s=96&d=mm&r=g\",\"caption\":\"Heidy-O\"},\"url\":\"https:\\\/\\\/amiti.org.mx\\\/en\\\/author\\\/heidy-o\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cuando Windows deja de ver el ataque - AMITI","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/amiti.org.mx\/en\/14245\/cuando-windows-deja-de-ver-el-ataque\/","og_locale":"en_US","og_type":"article","og_title":"Cuando Windows deja de ver el ataque - AMITI","og_description":"Autor: Eduardo Salmeron, Cyber Threat Research de Silent4Business AMSI y ETW est\u00e1n dise\u00f1ados para detectar actividad maliciosa en Windows. Pero \u00bfqu\u00e9 sucede cuando el propio sistema es manipulado para \u201cno ver\u201d el ataque? Este an\u00e1lisis muestra c\u00f3mo t\u00e9cnicas en memoria, PowerShell y cifrado permiten desactivar mecanismos de monitoreo sin generar alertas evidentes. No es teor\u00eda: [&hellip;]","og_url":"https:\/\/amiti.org.mx\/en\/14245\/cuando-windows-deja-de-ver-el-ataque\/","og_site_name":"AMITI","article_publisher":"https:\/\/www.facebook.com\/AMITIMex\/?locale=es_LA","article_published_time":"2026-02-23T19:53:00+00:00","article_modified_time":"2026-02-24T19:54:48+00:00","og_image":[{"width":270,"height":200,"url":"https:\/\/amiti.org.mx\/wp-content\/uploads\/2026\/02\/image.png","type":"image\/png"}],"author":"Heidy-O","twitter_card":"summary_large_image","twitter_creator":"@AMITI_Mex","twitter_site":"@AMITI_Mex","twitter_misc":{"Written by":"Heidy-O","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/amiti.org.mx\/14245\/cuando-windows-deja-de-ver-el-ataque\/#article","isPartOf":{"@id":"https:\/\/amiti.org.mx\/14245\/cuando-windows-deja-de-ver-el-ataque\/"},"author":{"name":"Heidy-O","@id":"https:\/\/amiti.org.mx\/#\/schema\/person\/09fd614b7d440b5ba06c0480ed768000"},"headline":"Cuando Windows deja de ver el ataque","datePublished":"2026-02-23T19:53:00+00:00","dateModified":"2026-02-24T19:54:48+00:00","mainEntityOfPage":{"@id":"https:\/\/amiti.org.mx\/14245\/cuando-windows-deja-de-ver-el-ataque\/"},"wordCount":110,"commentCount":0,"publisher":{"@id":"https:\/\/amiti.org.mx\/#organization"},"image":{"@id":"https:\/\/amiti.org.mx\/14245\/cuando-windows-deja-de-ver-el-ataque\/#primaryimage"},"thumbnailUrl":"https:\/\/amiti.org.mx\/wp-content\/uploads\/2026\/02\/image.png","articleSection":["Noticias AMITI"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/amiti.org.mx\/14245\/cuando-windows-deja-de-ver-el-ataque\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/amiti.org.mx\/14245\/cuando-windows-deja-de-ver-el-ataque\/","url":"https:\/\/amiti.org.mx\/14245\/cuando-windows-deja-de-ver-el-ataque\/","name":"Cuando Windows deja de ver el ataque - AMITI","isPartOf":{"@id":"https:\/\/amiti.org.mx\/#website"},"primaryImageOfPage":{"@id":"https:\/\/amiti.org.mx\/14245\/cuando-windows-deja-de-ver-el-ataque\/#primaryimage"},"image":{"@id":"https:\/\/amiti.org.mx\/14245\/cuando-windows-deja-de-ver-el-ataque\/#primaryimage"},"thumbnailUrl":"https:\/\/amiti.org.mx\/wp-content\/uploads\/2026\/02\/image.png","datePublished":"2026-02-23T19:53:00+00:00","dateModified":"2026-02-24T19:54:48+00:00","breadcrumb":{"@id":"https:\/\/amiti.org.mx\/14245\/cuando-windows-deja-de-ver-el-ataque\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/amiti.org.mx\/14245\/cuando-windows-deja-de-ver-el-ataque\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/amiti.org.mx\/14245\/cuando-windows-deja-de-ver-el-ataque\/#primaryimage","url":"https:\/\/amiti.org.mx\/wp-content\/uploads\/2026\/02\/image.png","contentUrl":"https:\/\/amiti.org.mx\/wp-content\/uploads\/2026\/02\/image.png","width":270,"height":200},{"@type":"BreadcrumbList","@id":"https:\/\/amiti.org.mx\/14245\/cuando-windows-deja-de-ver-el-ataque\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/amiti.org.mx\/"},{"@type":"ListItem","position":2,"name":"Cuando Windows deja de ver el ataque"}]},{"@type":"WebSite","@id":"https:\/\/amiti.org.mx\/#website","url":"https:\/\/amiti.org.mx\/","name":"AMITI","description":"Mejores empresas TI para M\u00e9xico","publisher":{"@id":"https:\/\/amiti.org.mx\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/amiti.org.mx\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/amiti.org.mx\/#organization","name":"AMITI","url":"https:\/\/amiti.org.mx\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/amiti.org.mx\/#\/schema\/logo\/image\/","url":"https:\/\/amiti.org.mx\/wp-content\/uploads\/2024\/09\/Amiti_CMYK.png","contentUrl":"https:\/\/amiti.org.mx\/wp-content\/uploads\/2024\/09\/Amiti_CMYK.png","width":1161,"height":458,"caption":"AMITI"},"image":{"@id":"https:\/\/amiti.org.mx\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/AMITIMex\/?locale=es_LA","https:\/\/x.com\/AMITI_Mex","https:\/\/www.instagram.com\/amiti_mex\/","https:\/\/www.linkedin.com\/company\/amiti-mex\/","https:\/\/www.youtube.com\/channel\/UCaBdZB-k6j-lCH-eTCbLGJw"]},{"@type":"Person","@id":"https:\/\/amiti.org.mx\/#\/schema\/person\/09fd614b7d440b5ba06c0480ed768000","name":"Heidy-O","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/6bb82f883f01a117ffeab0847eb3d1e1bc043d3f57c214a17dde7220e395cb0d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/6bb82f883f01a117ffeab0847eb3d1e1bc043d3f57c214a17dde7220e395cb0d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6bb82f883f01a117ffeab0847eb3d1e1bc043d3f57c214a17dde7220e395cb0d?s=96&d=mm&r=g","caption":"Heidy-O"},"url":"https:\/\/amiti.org.mx\/en\/author\/heidy-o\/"}]}},"publishpress_future_action":{"enabled":false,"date":"2026-04-13 11:50:10","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"category","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/amiti.org.mx\/en\/wp-json\/wp\/v2\/posts\/14245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/amiti.org.mx\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/amiti.org.mx\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/amiti.org.mx\/en\/wp-json\/wp\/v2\/users\/148"}],"replies":[{"embeddable":true,"href":"https:\/\/amiti.org.mx\/en\/wp-json\/wp\/v2\/comments?post=14245"}],"version-history":[{"count":1,"href":"https:\/\/amiti.org.mx\/en\/wp-json\/wp\/v2\/posts\/14245\/revisions"}],"predecessor-version":[{"id":14247,"href":"https:\/\/amiti.org.mx\/en\/wp-json\/wp\/v2\/posts\/14245\/revisions\/14247"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/amiti.org.mx\/en\/wp-json\/wp\/v2\/media\/14246"}],"wp:attachment":[{"href":"https:\/\/amiti.org.mx\/en\/wp-json\/wp\/v2\/media?parent=14245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/amiti.org.mx\/en\/wp-json\/wp\/v2\/categories?post=14245"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/amiti.org.mx\/en\/wp-json\/wp\/v2\/tags?post=14245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}