The Case of the Tricky Tool
Looks can be deceiving. There are times when you think an analysis is going to be easy, and everything points in that direction, until you hit a snag. This happens. Sometimes you've ...
The Case of the Tricky Tool
Looks can be deceiving. There are times when you think an analysis is going to be easy, and everything points in that direction, until you hit a snag. This happens. Sometimes you've ...
Document Analysis – 2018-newsletters.xls
Today I received what was clearly a malicious document in my email, so to celebrate the publishing of my second PluralSight course - Performing Malware Analysis on Malicious Documents - I thought ...
Document Analysis – 2018-newsletters.xls
Today I received what was clearly a malicious document in my email, so to celebrate the publishing of my second PluralSight course - Performing Malware Analysis on Malicious Documents - I thought ...
Malware Analysis Course on Pluralsight!
Since 2010, I have been running my Introduction to Malware Analysis course at various conferences and organizations, and have taught over 200 students. I've heard from many of my former students that ...
Malicious DNS Namespace Collisions
Over the last few weeks, I've noticed a problem come up again in multiple places that I first saw many years ago and apparently is still very common - DNS Namespace Collisions ...
Malicious DNS Namespace Collisions
Over the last few weeks, I've noticed a problem come up again in multiple places that I first saw many years ago and apparently is still very common - DNS Namespace Collisions ...
MASTIFF Online
MASTIFF has been a pet project of mine for about two years now. While it has not progressed as far as I would have liked, we made a major announcement this week.On ...
Installing Yara into IDA Pro 64-bit Linux
tl;dr Install a 32-bit VM, compile Yara, copy files over. See link below for files to just install. Last Friday, pnX posted that he updated his awesome IDA plug-in, IDAScope, to include ...
Installing Yara into IDA Pro 64-bit Linux
tl;dr Install a 32-bit VM, compile Yara, copy files over. See link below for files to just install. Last Friday, pnX posted that he updated his awesome IDA plug-in, IDAScope, to include ...
