PowerShell Sandbox — Build It Yourself!
summary
Presentation covers techniques for deobfuscating malicious PowerShell scripts used by malware and droppers, reviewing existing deobfuscation methods and proposing a new approach that enables building an automated PowerShell sandbox for analysis.
AI-written summary · about
chapters (5)
- 0:00Introduction
- 12:25Building PowerShell interpreter
- 26:56Debugging and code changes
- 33:08Use cases and summary
- 34:34Q&A
related talks
49mPowerShell obfuskation Techniques & How To Detect Them
27mUsing PowerShell as a Reverse Engineering Tool
01h 40mDefending against PowerShell attacks - in theory, and in practice
41mBuilding Your Own Malware Sandbox
48mStop Writing Insecure PowerShell... Seriously.
49mPowerShell for Security Incident Response
43mMalicious Payloads vs Deep Visibility: A PowerShell Story
45mThe Windows Sandbox Paradox