Reporting is, by nature, only the threat actors that have been caught. What about all the ones that didn’t get caught? There is no way to examine that and It comes down to the fact that we don’t know what they did and therein lies the problem for threat emulation.
| Date | September 13, 2023 H 09:00 |
|---|---|
| End | September 14, 2023 H 17:00 |
| Location | Virtual |
Click here to add this event to your google calendar
This class will explore the theory behind malware obfuscation, starting with the Theory of Code Obfuscation and how it applies to Tactics, Techniques, and Procedures (TTPs) implemented by modern Advanced Persistent Threats (APTs). We will examine everything from standard variable obfuscation to control flow manipulation to data procedurization. Throughout the course, students will apply obfuscation theory to practical applications in hands-on labs.
Windows presents a vast attack surface and provides the Blue Team with many detection opportunities. Students will learn about evading Blue Team hunters by first learning how to build detections and then masking their signatures and exploiting indicators to decrease their detection probability. By the end of the course, students will be equipped with the knowledge to obfuscate open-source tools without necessitating custom tooling for use across a diverse and dynamic operations environment.
