operating system
2024-08-16
An operating system (OS) is system software that manages computer hardware, software resources, and provides common services, allowing a device to ...
Read More
reverse engineering
2024-08-16
Reverse Engineering is the process of examining a computer system or program with the intent of understanding how it functions and behaves.
Read More
rootkit
2024-08-16
A rootkit is software, usually malicious in nature, designed to provide surreptitious access to a computer system and hide the presence of the ...
Read More
strings
2024-08-16
In the context of computer programming, a string is a sequence of characters used to represent text.
Read More
Payload Placement (PE files)
2024-08-07
Malware developers have options as to where they place the payload for their malware within a PE file. The .data and .rdata sections are easy and ...
Read More
Persistence
2024-08-06
Persistence in the context of malware refers to the ability of malicious code to survive after the exploited component is terminated or the system is ...
Read More
Process Injection
2024-08-06
Process Injection is a method of executing arbitrary code into the address space of a separate running process.
Process Injection can be carried out ...
Read More
antivirus
2024-08-05
Antivirus software (AV) or anti-malware are computer programs used to prevent, detect, and remove malware.
Read More
Behavior-based Detection
2024-08-05
Once malware is running, security software will continue to look for suspicious behavior emitted by running processes.
For example, if a notepad.exe ...
Read More
CreateFile
2024-08-05
CreateFile() is a WinAPI macro (chooses CreateFileA or CreateFileW as appropriate) that creates a new file or opens an existing file. On success, a ...
Read More