Here is an overview of content I published in November:
Blog posts:
- Analysis Of An Office Maldoc With Encrypted Payload (Quick And Dirty)
- Analysis Of An Office Maldoc With Encrypted Payload (Slow And Clean)
- Analysis Of An Office Maldoc With Encrypted Payload: oledump plugin
- Update: translate.py V2.1.0
- byte-stats.py
- Update: oledump V0.0.20
- Update: emldump.py Version 0.0.4
- Update: cut-bytes.py Version 0.0.2
- Update: find-file-in-file.py Version 0.0.5
- Maldoc Social Engineering Trick
- Update: nsrl.py Version 0.0.2
- Update: emldump.py Version 0.0.5
- Authenticode And Timestamping And sha256
- Update: virustotal-search.py Version 0.1.3
- Update: oledump.py Version 0.0.21
- Update: Authenticode Tools
YouTube videos:
- byte-stats.py
- oledump.py –extra
- Maldoc Social Engineering Trick
- CMD.EXE: Backup Privilege
- SpiderMonkey: Dump
Videoblog posts:
SANS ISC Diary entries:
Didier Stevens 