null Mumbai Humla 21 February 2016 Null Mumbai Humla | Malware Forensic Register

Null offensive hacking hands-on training.

Proposed sessions for this event:

• Advanced Malware Analysis using Cuckoo Sandbox and Honeypot by Sujith Ambady
• Advanced Malware Analysis using Cuckoo Sandbox and Honeypot by Sujith Ambady

To analyse malwares using automated and manual methods in this Humla session.

 Cuckoo Automated Malware Analysis

 SIEM malware Triage

 Clam AV signature correlation

 Remnux docx, xlsx, pptx and pdf analysis

 Malware file extraction from Pcap and from disk images with mmls, icat, istat

 Windows rootkit analysis with WinDBG and Windows data structures like EPROCESS, Process Environment Block and Thread Local Storage

 Ransomware analysis

 Extract live memory dump and disk image of an exploited - windows machine with WinDD, DumpIT and analyse the same with Volatility, Foremost
Analyse a live memory dump and disk image of an exploited Linux machine with LiME, Volatility and TSK

 Capture live Malwares with Nepenthes