Analysis on legit tools abused in human-operated ransomware

SANS Ransomware Summit 2023

Analysis on legit tools abused in human-operated ransomware

Speakers:
Toru Yamashige, Senior Incident Response Consultant, Trend Micro Inc.
Keisuke Tanaka, Principal Incident Response Consultant, Trend Micro Inc.

As the detection logics of AV vendors improve, threat actors employ countermeasures to evade them. One of the most common ways in which threat actors hide from detection and carry out their malicious activities is by abusing legitimate tools. We believe that "legitimate tools" can be classified into three …

analysis consultant countermeasures detection evade human human-operated ransomware incident incident response legit micro ransomware response sans speakers summit threat threat actors tools trend trend micro trend micro inc vendors