![]() ![]() Remote desktop is a common feature in operating systems. Reads information about supported languagesĪdversaries may attempt to get information about running processes on a system. Monitors specific registry key for changes The input sample is signed with a certificateĪdversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in ] and ].Īdversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software. Software packing is a method of compressing or encrypting an executable.Ĭode signing provides a level of authenticity on a binary from the developer and a guarantee that the binary has not been tampered with. Installs hooks/patches the running process Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources. ![]() Opens the Kernel Security Device Driver (KsecDD) of Windows ![]() Loadable Kernel Modules (or LKMs) are pieces of code that can be loaded and unloaded into the kernel upon demand. ![]()
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |