[Hackersuli] [HUN] Windows a szereloaknan

1. Windows a szerelőaknán
Hackersuli 2018. február

7. Autoruns

11. Autoruns
For proper analysys
● Autoruns
● Save
● Copy files to clean system
● Analyze offline

18. Not in Autoruns - SHIM

19. Spot the malware

20. Spot the malware, Part 2

22. ADS streams
echo 1 > test.txt
type test.txt
echo secret > test.txt:secret.txt
type test.txt:secret.txt
notepad test.txt:secret.txt
Streams.exe from Sysinternals suite