Skip to content

Looking for the Perfect Signature: Automatic YARA Rules

Andrea Marcelli

Automated YARA rule generation methodologies to detect emerging malware variants while minimizing false positives.

Summary

This DEF CON talk covers looking for the perfect signature: automatic yara rules.

Key topics discussed include: Kind: captions Language: en you<00:00:00. 240><c> know</c><00:00:00.

(AI summary — Claude Haiku)

Related talks

Main Stage·46 min

  • DEF CON
  • Malware
  • Date: Aug 2018
  • Location: Las Vegas

Levinson · Borges

Levinson and Borges presents ill see your missile and raise you a mirv: Typically, the activities of a malware attack occur on an execution timeline that generally consists of 3 segments—the vector, the stage, and t...

malware-analysisreverse-engineeringdetection-evasion+1

Main Stage·21 min

  • DEF CON
  • Malware
  • Date: Aug 2018
  • Location: Las Vegas

Sheng Hao Ma

Sheng Hao Ma presents playing malware injection with exploit thoughts: In the past, when hackers did malicious program code injection, they used to adopt RunPE, AtomBombing, cross-process creation threads, and other...

malware-analysisreverse-engineeringdetection-evasion+1