Ma Windows APT Warfare

Identify and prevent Windows APT attacks effectively
1. Auflage 2023
ISBN: 978-1-80461-721-2
Verlag: De Gruyter
Format: EPUB
Kopierschutz: 0 - No protection

E-Book, Englisch, 258 Seiten

No detailed description available for "Windows APT Warfare".

Autoren/Hrsg.

Ma, Sheng-Hao

Weitere Mitwirkende

Chang, Ziv

Maggi, Federico

Fachgebiete

• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit Datensicherheit, Datenschutz
• Mathematik | Informatik EDV | Informatik Programmierung | Softwareentwicklung Compiler
• Mathematik | Informatik EDV | Informatik Betriebssysteme Windows Betriebssysteme

Inhaltsverzeichnis

Table of Contents - From Source to Binaries – The Journey of a C Program
- Process Memory – File Mapping, PE Parser, tinyLinker, and Hollowing
- Dynamic API Calling – Thread, Process, and Environment Information
- Shellcode Technique – Exported Function Parsing
- Application Loader Design
- PE Module Relocation
- PE to Shellcode – Transforming PE Files into Shellcode
- Software Packer Design
- Digital Signature – Authenticode Verification
- Reversing User Account Control and Bypassing Tricks
- Appendix – NTFS, Paths, and Symbols

Über Autor(innen)

Ma Sheng-Hao:

Sheng-Hao Ma is currently working as a threat researcher at TXOne Networks, specializing in Windows reverse engineering analysis for over 10 years. In addition, he is currently a member of CHROOT, an information security community in Taiwan. He has served as a speaker and instructor for various international conferences and organizations such as Black Hat USA, DEFCON, CODE BLUE, HITB, VXCON, HITCON, ROOTCON, Ministry of National Defense, and Ministry of Education.