Looking for the Perfect Signature: Automatic YARA Rules
Automated YARA rule generation methodologies to detect emerging malware variants while minimizing false positives.
Summary
Related talks
Main Stage·46 min
Levinson · Borges
Levinson and Borges presents ill see your missile and raise you a mirv: Typically, the activities of a malware attack occur on an execution timeline that generally consists of 3 segments—the vector, the stage, and t...
Main Stage·21 min
Sheng Hao Ma
Sheng Hao Ma presents playing malware injection with exploit thoughts: In the past, when hackers did malicious program code injection, they used to adopt RunPE, AtomBombing, cross-process creation threads, and other...
Main Stage·49 min
Brad Woodberg
Brad Woodberg categorizes modern adversary command and control mechanisms, analyzing evasion strategies across DNS, cloud APIs, and encrypted tunnels.


