Home Contact

M-unition

The Ammunition You Need to Find Evil and Solve Crime

About Us

Welcome to M-unition, the MANDIANT blog. Here we share our insights about the tools we create and use to find evil and solve crime.

New research being presented today at DoD Cyber Crime

Written by Michael J. Graven

Several of us are at the DoD Cyber Crime 2009 conference this week in Saint Louis, MO. There’s been some interesting talk about products and techniques, as well as the usual “class reunion” of folks we used to work with. And an ice storm. Good times.

 

Today, Nick Harbour’s going to present some research that follows from his 2008 DEFCON presentation — examining, in depth, some of the newer persistence methods the attackers are using against the defense community. He’ll also be demoing a work in progress tool currently dubbed “Find Evil,” which helps an analyst find evil executables in a sea of legitimate ones. It goes beyond our Red Curtain file analysis tool, using disassembly of the suspect binary to perform more sophisticated analysis.

 

Nick’s presentation is at 13:35 today, in the Landmark 7 meeting room.

. 28 Jan 09 | Conferences


Leave a Reply

You must be logged in to post a comment.