The Arms Race of Evasion: Examining Evolving Evasion Techniques in Incident Response

SANS Asia Pacific DFIR Summit 2023
The Arms Race of Evasion: Examining Evolving Evasion Techniques in Incident Response
Speakers: Partha Alwar and Mahmoud El Halabi

Much of the malicious actions taken by threat actors can be caught by security analysts through modern security tooling. To avoid premature detection, advanced threat groups have consistently used creative methods to avoid, disable, or confuse security tooling and security analysts. In this talk, we will discuss real-world examples of techniques that threat actors have …

actions analysts arms asia asia pacific can caught detection dfir evasion evasion techniques incident incident response malicious pacific race response sans security security tooling speakers summit taken techniques threat threat actors tooling