Security Technology

Teasing the Secrets From Threat Actors: Malware Configuration Parsing at Scale

Configuration data – which is historically tricky to parse – can be parsed directly from memory. We use the information-stealer IcedID as an example to cover the technique.

Tailoring Sandbox Techniques to Hidden Threats

Techniques such as dependency emulation and analysis of encrypted network traffic can help detect malware samples that would not normally execute in a sandbox environment.