12 Days of Defense - Day 1: PDF and Office Doc Malware IOC Extraction

  Рет қаралды 29,786

John Hubbard

John Hubbard

Күн бұрын

In this video I show how to extract a malicious URL from a PDF without opening it, how to spot a weaponized Office document, and a method to quickly de-obfuscate PowerShell. Enjoy!
Links:
REMnux: www.remnux.org
PDF: app.any.run/ta...
Macro-enabled doc: hybrid-analysi...
===
My SANS Courses:
SEC450 - Blue Team Fundamentals: sans.org/sec450
MGT551 - Building and Leading Security Operations Centers: sans.org/mgt551
PDF Guide to Security Operations: www.sans.org/s...
Blueprint Podcast: sans.org/bluep...
Twitter: / sechubb

Пікірлер: 46
12 Days of Defense - Day 2: How to use Zeek for PCAP Analysis
13:03
12 Days of Defense - Day 2: How to use Zeek for PCAP Analysis
John Hubbard
Рет қаралды 27 М.
12 Days of Defense - Day 3: How the SOC Works (Security Monitoring Tools and Architecture)
18:33
12 Days of Defense - Day 3: How the SOC Works (Security Monitoring Tools and Architecture)
John Hubbard
Рет қаралды 11 М.
Қарғалардың анасы бар ма? | 1 серия | Сериал «‎QARGA 2»‎ | КОНКУРС
41:02
Қарғалардың анасы бар ма? | 1 серия | Сериал «‎QARGA 2»‎ | КОНКУРС
OMIR
Рет қаралды 1,4 МЛН
“Don’t stop the chances.”
00:44
“Don’t stop the chances.”
ISSEI / いっせい
Рет қаралды 62 МЛН
Mom Hack for Cooking Solo with a Little One! 🍳👶
00:15
Mom Hack for Cooking Solo with a Little One! 🍳👶
5-Minute Crafts HOUSE
Рет қаралды 23 МЛН
家庭版踩气球挑战，妈妈竟然什么也没得到#funny #宝宝 #萌娃 #comedy
01:04
家庭版踩气球挑战，妈妈竟然什么也没得到#funny #宝宝 #萌娃 #comedy
搞笑爸爸带俩娃
Рет қаралды 10 МЛН
PDF Malware Analysis with Volatility, Any.Run & VirusTotal
16:39
PDF Malware Analysis with Volatility, Any.Run & VirusTotal
Motasem Hamdan | Cyber Security & Tech
Рет қаралды 1,2 М.
The King Of Malware is Back
19:27
The King Of Malware is Back
John Hammond
Рет қаралды 192 М.
12 Days of Defense - Day 4: How to Analyze Email Headers and How Spoofed Email Works
21:31
12 Days of Defense - Day 4: How to Analyze Email Headers and How Spoofed Email Works
John Hubbard
Рет қаралды 29 М.
Fileless Ransomware: Powershell Netwalker
7:22
Fileless Ransomware: Powershell Netwalker
PC Security Channel
Рет қаралды 67 М.
What to do with a Virus Infection as a SOC Analyst | Cybersecurity Day in Life
8:17
What to do with a Virus Infection as a SOC Analyst | Cybersecurity Day in Life
Tech with Jono
Рет қаралды 42 М.
SOC 101: Real-time Incident Response Walkthrough
12:30
SOC 101: Real-time Incident Response Walkthrough
Exabeam
Рет қаралды 212 М.
How HACKERS Send Malware | DNS Spoofing
11:46
How HACKERS Send Malware | DNS Spoofing
Cyb3rMaddy
Рет қаралды 63 М.
How To Setup A Sandbox Environment For Malware Analysis
18:17
How To Setup A Sandbox Environment For Malware Analysis
HackerSploit
Рет қаралды 269 М.
Detect Hackers & Malware on your Computer (literally for free)
16:38
Detect Hackers & Malware on your Computer (literally for free)
John Hammond
Рет қаралды 328 М.
Қарғалардың анасы бар ма? | 1 серия | Сериал «‎QARGA 2»‎ | КОНКУРС
41:02
Қарғалардың анасы бар ма? | 1 серия | Сериал «‎QARGA 2»‎ | КОНКУРС
OMIR
Рет қаралды 1,4 МЛН