12 Days of Defense - Day 1: PDF and Office Doc Malware IOC Extraction

[@AjitKumar-sy9cv]

Thanks John Hubbard .. I like this approach of keeping the video short, focused, and taking away the initial setup requirement. Domain is also good.. pdf and doc are the two most carriers for malware.. !! Great.!!

[@kaiser11]

I just discovered this channel and... WOW it is gold. Nice info mate!

[@zuberkariye2299]

This got be the best MA vid that i came across with for the first time! I hope you see this and create more vids like this!

[@cyberpanther5679]

John! I learnt a lot from this session. Thank you so much

[@ChrisDale]

Loved the session John, keep it up! Cheers.

[@bairammamedov570]

the BEST channel on Security area.

[@4ag2]

Very interesting! Thanks for the initiative. Can't wait for next video.

[@Cybermonk3y]

Thanks for the share @sechubb. Looking forward to the complete series.

[@miguelb.j.2089]

thank you very much! it has been very instructive! I look forward to seeing the next one!

[@mohamedsaidani8509]

Thanks a lot Mr.Hubbard for this new kind of "free training" keep up

[@redbox360]

Great content, SANS always my favorite learning on security

[@faanross]

this was awesome, really love these practical lab type instructionals. excited to dig into the rest - thanks john!

[@khurramwzd]

Thanks for sharing the Knowledge, I hope you will keep posting more sereires.

[@kapoof2]

Wow. This was a ton of great information. Very entertaining and well explained as well. I want more!

[@rezamehrad8512]

Thank you! Amazing! Waiting for the next ..

[@x0rZ15t]

Magnificent work, thank you very much for this. Please keep up the good work!

[@thainetd1638]

Great video, I will share in my channel. Please keep good work.

[@HereDerPharao]

Awesome video! This is very helpful. Thanks a lot.

[@1UniverseGames]

4:13, Sir what passwords did you used to open the file? I just did not understand it properly

[@SecHubb]

The standard password for malware files is “infected”.

[@getoutmore]

Learned so much from this and absolutely Loved this. Thanks you!! I Wish there would be more good resources for this Out there to get started

[@andrewritchie1699]

Excellent video. Thank you.

[@saisumanthsrivatsa6772]

What is the process if any other malicious file is linked with PDF other than a malicious link

[@ravenbao3334]

Can't believe this is free! But the GIAC courses you recommended are too expensive I have to say..

[@ΔημητρηςΤ-ζ7ω]

Great informative video John!

[@golgothus]

Thanks for the video! Definitely pretty well made and really enjoyed the content, I'll be looking to see if my team / company will let us get a VM for remnux or another image which might be useful for anlaysis. Seems like there are some nice pre-loaded tools ready and available for investigations and analsysis.

[@venuresu3742]

Good explanation and valuable info. Thanks

[@vinyldown8490]

This is amazing! thank you a lot

[@charanreddy8856]

Is the process same for all word, pdf and excel files? Please help me, Thanks.

[@SecHubb]

No unfortunately it’s not all the same, but this does work in many cases. There are a number of ways of weaponizing documents and going over all of them would be a whole class in itself. Check out the tools built into the REMnux Linux distro at remnux.org to see a bunch of other ways of dissecting documents of various types.

[@charanreddy8856]

@@SecHubb Thanks for helping me John, looking forward to learn more from you

[@sreedeepcv866]

Great video ,nice explanation

[@sgolota]

thank you for your lessons!

[@StrongtotheCore]

A great tutorial! Thanks.

[@rckrs-jf8lb]

Thanks for share your knowledge.

[@Belthazor85]

Very good!!

[@YourDailyHappyPill]

Thanks a lot.

[@yasinaltunterim]

thank you very much.

[@FeliksTrzymalko]

thank you sir!

[@getoutmore]

I'd give my right arm to BE able to attend the soc Course. Sadly I'm Not from us and its too expensive for me as a private Person.

[@mikedonovan5949]

Has anyone had any luck downloading the remnux ova?

[@adivasi6894]

I didn't have any issues there, however I am stuck in the next video, installing Zeek.

[@mrpimpirikli3946]

Super

[@egalegalegal2176]

LSD 😁

[@ademkarakus83]

Thank you so much