Malware Hunting with the Sysinternals Tools

The Seeker · Jun 15, 2012

This session provides an overview of several Sysinternals tools, including Process Monitor, Process Explorer, and Autoruns, focusing on the features useful for malware analysis and removal. These utilities enable deep inspection and control of processes, file system and registry activity, and autostart execution points. Mark Russinovich demonstrates their malware-hunting capabilities by presenting several real-world cases that used the tools to identify and clean malware, and concludes by performing a live analysis of a Stuxnet infection’s system impact.
Click to expand...

A fascinating demonstration of what you can do with the awesome (free) Sysinternal apps. The live running of Stuxnet and Flame is especially interesting.

Link.

Gullible Jones · Jun 15, 2012

Thanks, downloading as I type.

Edit: entertaining as usual, but could have been better IMO. I would have liked to see Sysinternals tools vs. nastier rootkits such as TDSS variants.

Log in or Sign up

Malware Hunting with the Sysinternals Tools

The Seeker Registered Member

Gullible Jones Guest

Log in or Sign up

Malware Hunting with the Sysinternals Tools

The Seeker Registered Member

Gullible Jones Guest

Useful Searches