Creating a YARA Rule to Detect Obfuscated Strings, (Mon, Sep 4th)

I wrote a blog post “Quickpost: Analysis of PDF/ActiveMime Polyglot Maldocs” on how to analyse PDF/ActiveMime polyglot malicious document files and also developed a YARA rule to detect them.

Article Link: https://isc.sans.edu/diary/rss/30186

1 post - 1 participant

Read full topic

activemime analysis blog blog post detect document files maldocs malicious obfuscated pdf polyglot quickpost strings topic yara