A New Trend for the Blue Team: Using a Symbolic Engine to Detect Evasive Forms of Malware/Ransomware
Details A New Trend for the Blue Team: Using a Symbolic Engine to Detect Evasive Forms of Malware/Ransomware and evaluates key implications for security practitioners.
Summary
Black Hat session on A New Trend for the Blue Team: Using a Symbolic Engine to Detect Evasive Forms of Malware/Ransomware.
Related talks
Blue Team Village·36 min
Project Obsidian
Project Obsidian walks through triaging and reverse engineering high volumes of malicious email attachments and phishing lures.
Blue Team Village·52 min
Filipi Pires
Filipi Pires demonstrates techniques for dissecting malicious PDF documents, extracting embedded JavaScript, and uncovering hidden exploit streams.
Demo Labs·20 min
Tomoaki Tani · Shusei Tomonaga
A demonstration of using MalConfScan with Cuckoo Sandbox to extract configuration data from malware families in memory.