DFSP # 409 - Regsvcs and Regasm Abuse

Digital Forensic Survival Podcast - Un pódcast de Digital Forensic Survival Podcast - Martes

Categorías:

This week I’m talking about Regsvcs /Regasm exploitation, which is a Windows tactic attackers use to evade defense mechanisms and execute code. Specifically, this technique can be used to bypass process whitelisting and digital certificate validation. I'll break down some interpretation methods that may be used to identify such exploitation....

Visit the podcast's native language site