Shop Our Merch Report A Breach 1-877-550-4728

Home > Resources > Blog > Become The Malware Analyst Series: PowerShell Obfuscation Shellcode

Become The Malware Analyst Series: PowerShell Obfuscation Shellcode

August 20, 2020

By Scott Nusbaum in Incident Response, Incident Response & Forensics, Malware Analysis, Threat Hunting

In this second installment of the ‘Become a Malware Analyst Series,” Principal Incident Response & Research Consultant Scott Nusbaum focuses on PowerShell obfuscation by analyzing a PowerShell sample that was identified during an incident response. Scott will also touch on methods and tools to identify common Metasploit function hashes.

More Like This

Splunk SPL Queries for Detecting gMSA Attacks

May 20, 2022

By Andrew Schwartz in Active Directory Security Review, Incident Response, Incident Response & Forensics, Penetration Testing, Program Assessment & Compliance, Purple Team Adversarial Detection & Countermeasures, Security Testing & Analysis, Threat Hunting

CVE 2022-22965 (Spring4Shell) Vulnerability

April 1, 2022

By Leo Bastidas and Ashley Pearson in Incident Response, Incident Response & Forensics, Table-Top Exercises, Threat Hunting, Vulnerability Assessment

Simplifying Your Operational Threat Hunt Planning

March 30, 2022

By Justin Vaicaro in Incident Response, Incident Response & Forensics, Malware Analysis, Table-Top Exercises, Threat Hunting