Malware Mondays #09 - File Identification and Hashing Algorithms

preview_player
Показать описание
Identifying files by file type is often the first step in performing triage analysis. Hashing can also provide a way to not only uniquely identify files, but also other portions of a file such as by section or imports. In this Malware Mondays, we'll explore common file identification utilities such as file and magika, along with cryptographic hashing algorithms. We'll also explore the use of Yara for generating and creating detections based on hashes.

You can find stream artifacts and other resources at:
Рекомендации по теме
Комментарии
Автор

Started on mute, again...lol. Thanks to all who pointed that out - couldn't do it without you! It only lasts a few seconds so just a heads up

jstrosch
Автор

i think you're the second ippsec we always needed, thank you a lot for this series.

slavikos
Автор

Great video... Clear explanation with real time examples and with hands on approach. Really loved the yara part at the end. Please so more videos like this

KishorKumar-rers
Автор

Thanks for this content, very good for fundamentals. Liked the yara rule at the end to show a practical use.

cercz-cs
join shbcf.ru