Скачать или смотреть Malware Configuration Parsers: Discover How to Hunt for Malware Today!

The majority of threat actors buy and use commodity malware. To tailor this malicious software to their needs, they use malware configuration settings that dictate how it behaves. Parsing this data is an essential skill for any threat hunter or detection engineer, making learning to use malware configuration parsers vital.

Malware configuration parsing allows you to correlate intrusions, track campaigns, enrich threat hunts, improve incident response, and write better detection rules. It is a skill often overlooked due to its technical requirements, but with malware configuration parsing tools, you can add this game-changing anal skill to your arsenal.

===============================================

📹️ Check out our other videos: https://www.youtube.com/@adamgoss-kra...

🏫 Find more cyber threat intelligence, threat hunting, and custom tooling content at https://kravensecurity.com/

💪 Or book a coaching session today https://kravensecurity.com/services/


0:00 Introduction
0:48 Video Overview
0:59 Introduction to Malware Configuration
2:15 Reasons for Configuring Malware
3:29 Why Parse Malware Configurations?
4:16 Things You Can Find in Malware Configurations
6:34 Overview of Malware Configuration Parsers
7:26 Shared Features and Capabilities
10:24 Commodity Parsers
10:52 Custom Parsers
11:36 Parsing Malware with DC3-MWCP - DEMO
14:05 Pivoting off Extracted Configuration Data
15:04 Summary