OneNote Malware Trends - Understanding Process Activity with ProcMon

[@jstrosch]

What other techniques have you encountered from malicious onenote documents?

[@samwebb7820]

Great video, I learned a lot! Would've liked a continuation into running asyncrat and observing the activity with procmon.

[@jstrosch]

That would be interesting - thanks for the suggestion! I’ll add it to my video topics list :)

[@eduardoreta9360]

Great video!!

[@jstrosch]

Thanks!

[@ghazialkofahi6653]

amazing video

[@jstrosch]

Thank you!