Detecting Nullmixer with Yara - Crafting a Custom Rule

Crafting custom Yara rules is a key capability for anyone working in cyber security. In this video, the final part of the Nullmixer Technical Analysis series, we'll look into detecting Nullmixer with Yara and use tools like IDA Pro and Strings to identify strings, understand their context and use them to create a Yara rule of the unpacked binary. We'll also discuss testing methods and caveats with this rule.

00:00 Introduction
01:08 Using IDA To Find String Context
03:59 Using …

analysis binary context cyber cyber security discuss ida ida pro identify introduction key pro rules security series strings technical technical analysis testing tools understand video working yara yara rules