Mari DeGrazia has published a very useful post, which will help you to learn how to find and decode malicious PowerShell scripts. You will learn, which events to check, how to detect PowerShell and decode scripts. According to Mari, it’s only the first part, she will keep writing and teach us how to detect malicious PowerShell scripts in registry (part 2) and memory (part 3).
-
Results from the 2018 Volatility Contests
Results from the 2018 Volatility Contests have been published. We congratulate Aliz Hammon… -
Building your Android Application Testing Toolbox
This webcast explores the following topics: 1) Choosing the best test device 2) Rooting yo… -
Load More Related Articles
-
Gone in 10 Seconds: Snapchat Forensics
John Walther has written an article about Snapchat forensics. He used an iOS device runnin… -
How to Deploy Cuckoo Sandbox
Marc Rivero López presented a how-to guide that will help you to deploy Cuckoo Sandbox … -
How to Disassemble a Word Document with Embedded Macros
Here is a post by Paul Cimino, in which he goes through the steps to create a macro-embedd…
Load More In How To
