pestudio-style ανάλυση PE header και sections σε lab sample: .text/.rdata/.data/.rsrc και packed .pack0 (entropy 7.96, RWX) με suspicious imports VirtualAlloc, WriteProcessMemory, CreateRemoteThread, IsDebuggerPresent — mapping σε MITRE T1027.002, T1055, T1497
IntermediateReverse Engineering

Malware Triage Methodology (Intermediate) για SOC/IR

0 reactions
0 comments 6 views
Author Avatar

cyberadmin

50Subscribers

Premium Member Membership Required

You must be a Premium Member member to access this content.

Join Now

Already a member? Log in here

Reviews

0 %

User Score

0 ratings
Rate This
Prev
Penetration test walkthrough — old password σε root shell (CTF lab)

Penetration Test Walkthrough: From Old Password to Root Shell

Next
Netdiscover ARP host discovery — διάγραμμα ανίχνευσης hosts σε authorized lab

Netdiscover: Ανακάλυψη Hosts με ARP Discovery σε Penetration Testing