Detection Engineering
How to Write Yara Rules For DotNet Malware
How to develop Yara rules for .NET Malware. Utilising IL instructions and associated bytecodes.
Detection Engineering
Detection Engineering
How To Write Yara Rules For Malware - Practical Examples
Practical examples and breakdowns of indicators that can be used to produce effective yara rules.
Detection Engineering
Malware Analysis and Deobfuscation With Procmon - Smokeloader Example
Decoding malware loaders using Procmon and Cyberchef. Utilising Powershell to retrieve additional payloads and free online tooling to identify the malware family.