Experimental News Clipping Site

Tag: dynamic analysis

  • Cloud Blog: Backscatter: Automated Configuration Extraction

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/backscatter-automated-configuration-extraction/ Source: Cloud Blog Title: Backscatter: Automated Configuration Extraction Feedly Summary: Written by: Josh Triplett Executive Summary Backscatter is a tool developed by the Mandiant FLARE team that aims to automatically extract malware configurations. It relies on static signatures and emulation to extract this information without dynamic execution, bypassing anti-analysis logic present in…

  • Cloud Blog: XRefer: The Gemini-Assisted Binary Navigator

    —

    by

    system automation
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/xrefer-gemini-assisted-binary-navigator/ Source: Cloud Blog Title: XRefer: The Gemini-Assisted Binary Navigator Feedly Summary: Written by: Muhammad Umair Here at Mandiant FLARE, malware reverse engineering is a regular part of our day jobs. At times we are required to perform basic triages on binaries, where every hour saved is critical to incident response timelines. At…

  • Hacker News: Computing with Time: Microarchitectural Weird Machines

    —

    by

    system automation
    in

    Source URL: https://cacm.acm.org/research-highlights/computing-with-time-microarchitectural-weird-machines/ Source: Hacker News Title: Computing with Time: Microarchitectural Weird Machines Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the development and implications of microarchitectural weird machines (µWMs), which exploit CPU microarchitectural features to create powerful obfuscation techniques for malware. This research provides insights into how these µWMs can…

  • Hacker News: Eclipse Steady – Java Code Analysis

    —

    by

    system automation
    in

    Source URL: https://github.com/eclipse/steady Source: Hacker News Title: Eclipse Steady – Java Code Analysis Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text presents Eclipse Steady, a tool designed for assessing and mitigating vulnerabilities in Java applications, particularly concerning open-source components. Its significance lies in its approach of integrating static and dynamic analysis techniques…

  • Cloud Blog: capa Explorer Web: A Web-Based Tool for Program Capability Analysis

    —

    by

    system automation
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/capa-explorer-web-program-capability-analysis/ Source: Cloud Blog Title: capa Explorer Web: A Web-Based Tool for Program Capability Analysis Feedly Summary: Written by: Soufiane Fariss, Willi Ballenthin, Mike Hunhoff, Genwei Jiang, Tina Johnson, Moritz Raabe capa, developed by Mandiant’s FLARE team, is a reverse engineering tool that automates the identification of program capabilities. In this blog post…