Malware Triage

More documents

Recommendations

Info

Rough Notes Are OK VS.
Page 1 and 2: Malware Triage Using Open Data to H
Page 3 and 4: OPENANALYSIS.NET
Page 5 and 6: IOC Formats We Aren’t Talking Abo
Page 7 and 8: In Practice… Is APTx attacking us
Page 9 and 10: A Better Solution: Triage + IOCs =
Page 11 and 12: The Problem With AV Artemis!1A5E05B
Page 13 and 14: Robust IOCs Effectiveness of IOC Br
Page 15 and 16: More Robust Is… Multiple Samples
Page 17 and 18: The Key is Comparative Analysis Piv
Page 20 and 21: Analysis Triage Is it malicious? Ca
Page 26 and 27: Static Attributes Hmm… Something
Page 28 and 29: Static Attributes: Imports Compilat
Page 30 and 31: Try our free PE analysis tool PFTri
Page 32 and 33: Static Attributes Identified • In
Page 34 and 35: Packer / Crypter Weakness: Runtime!
Page 36 and 37: When Your Sandbox Doesn’t Work…
Page 42: Level Up! Your Analysis With Some L
Page 45: Identify Pivots Collect your notes
Page 49 and 50: Mining Open Data virusshare.com
Page 51: Mining Open Data With OAPivot
Page 57 and 58: Sandbox Shared Samples Share your s
Page 59 and 60: Comparative Analysis Identify commo
Page 61 and 62: Some network strings remain constan
Page 63 and 64: Look at that! The same registry key
Page 65 and 66: The opcodes of the string building
Page 67: IOC Formats We Really Really There
Page 70 and 71: Known Bad Run indicators against re
Page 72 and 73: Monitor When indicators stop matchi
Page 77 and 78: Key Takeaways Triage + IOCs = Auto
Page 79 and 80: Thank you : ) And don’t forget…

Malware Triage

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?