Detection Engineering

Detection Engineering | Oct 10, 2023

Developing Yara Rules With IL Bytecodes

How to develop Yara rules for .NET Malware. Utilising IL instructions and associated bytecodes.

Detection Engineering | Oct 04, 2023

Developing Yara Signatures for Malware - Practical Examples

Practical examples and breakdowns of indicators that can be used to produce effective yara rules.

Detection Engineering | Jun 24, 2023

Malware Analysis and Deobfuscation With Procmon - Smokeloader Example

Decoding malware loaders using Procmon and Cyberchef. Utilising Powershell to retrieve additional payloads and free online tooling to identify the malware family.

document.currentScript.parentNode.innerHTML = (parseInt(document.currentScript.closest('.iteration-container').dataset.length)).toString();