Report A Breach 1-877-550-4728

Home > Resources > Blog > Become The Malware Analyst Series: PowerShell Obfuscation Shellcode

Become The Malware Analyst Series: PowerShell Obfuscation Shellcode

August 20, 2020

By Scott Nusbaum in Incident Response, Incident Response & Forensics, Malware Analysis, Threat Hunting

In this second installment of the ‘Become a Malware Analyst Series,” Principal Incident Response & Research Consultant Scott Nusbaum focuses on PowerShell obfuscation by analyzing a PowerShell sample that was identified during an incident response. Scott will also touch on methods and tools to identify common Metasploit function hashes.

More Like This

Who Left the Backdoor Open? Using Startupinfo for the Win

February 18, 2021

By Justin Vaicaro in Incident Response, Incident Response & Forensics, Table-Top Exercises, Technical Counter Surveillance Measures, Threat Hunting

RisingSun: Decoding SUNBURST C2 to Identify Infected Hosts Without Network Telemetry

January 14, 2021

By Nick Gilberti in Incident Response, Incident Response & Forensics

SolarWinds Backdoor (Sunburst) Incident Response Playbook

December 17, 2020

By TrustedSec in Incident Response, Incident Response & Forensics, Research, Security Remediation, Security Testing & Analysis, Technical Counter Surveillance Measures, Threat Hunting