10 ms·
https://www.youtube.com/@lauriewired https://www.youtube.com/@lauriewired I talk about Reverse Engineering/Malware Research, Computing History, and low level p
by lauriewired 2y ago
https://www.youtube.com/@lauriewired https://www.youtube.com/@lauriewired
I talk about Reverse Engineering/Malware Research, Computing History, and low level programming.
- darksim905 2y agothis is awesome :)
- mettamage 2y agoHow did you get into reverse engineering? I had a couple of courses in Amsterdam (from VUSEC), but never really pursued it afterwards. It's fun, but I couldn't imagine doing it full-time.
- lauriewired 2y agoWork + Personal research. The main industry usecase for RE is malware analysis. The flow is essentially: 1. Break down a sample to determine behavior; this is usually a mixture of static (decompilation) and dynamic (running the sample in a safe env /w a debugger) analysis. 2. Write a signature / detection based on unique identifiers you discover inside the payload. This is where the real skill comes in; being extremely clever with Regex is helpful here. It's a tricky game to keep up with malware developers. Write a signature too specific, and all they have to do is recompile with a few string changes to defeat you. Conversely, if a detection is too broad, you run the risk of detecting benign software (aka a False Positive or FP).