Windows Offender: Reverse Engineering Windows Defender's Antivirus Emulator

Автор: Black Hat

Загружено: 2020-01-14

Просмотров: 10440

Описание: In this presentation, we'll look at Defender's emulator for analysis of potentially malicious Windows PE binaries on the endpoint. To the best of my knowledge, there has never been a conference talk or publication on reverse engineering the internals of any antivirus binary emulator before.

By Alexei Bulazel

Full abstract and materials: https://www.blackhat.com/us-18/briefi...

Не удается загрузить Youtube-плеер. Проверьте блокировку Youtube в вашей сети.
Повторяем попытку...

Windows Offender: Reverse Engineering Windows Defender's Antivirus Emulator

Доступные форматы для скачивания:

Скачать видео

Информация по загрузке:

Скачать аудио

Похожие видео

Investigating Malware Using Memory Forensics - A Practical Approach

Investigating Malware Using Memory Forensics - A Practical Approach

Windows Kernel Graphics Driver Attack Surface

Windows Kernel Graphics Driver Attack Surface

Kernel Mode Threats and Practical Defenses

Kernel Mode Threats and Practical Defenses

Abusing Windows Management Instrumentation (WMI)

Abusing Windows Management Instrumentation (WMI)

Unpacking the Packed Unpacker: Reverse Engineering an Android Anti-Analysis Native Library

Unpacking the Packed Unpacker: Reverse Engineering an Android Anti-Analysis Native Library

Нейросети захватили соцсети: как казахстанский стартап взорвал все AI-тренды и стал единорогом

Нейросети захватили соцсети: как казахстанский стартап взорвал все AI-тренды и стал единорогом

Breaking the x86 Instruction Set

Breaking the x86 Instruction Set

Ghidra - Journey from Classified NSA Tool to Open Source

Ghidra - Journey from Classified NSA Tool to Open Source

Windows Device Drivers Internals and some Reversing

Windows Device Drivers Internals and some Reversing

Как Ubuntu Предала Linux - Вся Правда о Взлёте и Падении Canonical

Как Ubuntu Предала Linux - Вся Правда о Взлёте и Падении Canonical

Clustered Points of Failure - Attacking Windows Server Failover Clusters

Clustered Points of Failure - Attacking Windows Server Failover Clusters

Mainframe [z/OS] Reverse Engineering and Exploit Development

Mainframe [z/OS] Reverse Engineering and Exploit Development

HackadayU: Reverse Engineering with Ghidra Class 1

HackadayU: Reverse Engineering with Ghidra Class 1

Protecting the Protector, Hardening Machine Learning Defenses Against Adversarial Attacks

Protecting the Protector, Hardening Machine Learning Defenses Against Adversarial Attacks

Securing the System: A Deep Dive into Reversing Android Pre-Installed Apps

Securing the System: A Deep Dive into Reversing Android Pre-Installed Apps

КАК УСТРОЕН TCP/IP?

КАК УСТРОЕН TCP/IP?

System Design Concepts Course and Interview Prep

System Design Concepts Course and Interview Prep

DEF CON 26 - Alexei Bulazel - Reverse Engineering Windows Defenders Emulator

DEF CON 26 - Alexei Bulazel - Reverse Engineering Windows Defenders Emulator

🌿 E2: Weekly kernel dev gardening: Build system refactor & cleanup 🌿

🌿 E2: Weekly kernel dev gardening: Build system refactor & cleanup 🌿

Exploitation of a Modern Smartphone Baseband

Exploitation of a Modern Smartphone Baseband