Loading Kernel Shellcode
April 23 2018In the wake of recent hacking tool dumps, the FLARE team saw a spike in malware samples detonating kernel shellcode. Although most samples can be analyzed statically,...
Read moreNew FakeNet-NG Feature: Content-Based Protocol Detection
October 23 2017I (Matthew Haigh) recently contributed to FLARE’s FakeNet-NG network simulator by adding content-based protocol detection and configuration. This feature is useful for analyzing malware that uses ...
Read moreNew FakeNet-NG Feature: Content-Based Protocol Detection
October 23 2017I (Matthew Haigh) recently contributed to FLARE’s FakeNet-NG network simulator by adding content-based protocol detection and configuration. This feature is useful for analyzing malware that uses ...
Read moreNew FakeNet-NG Feature: Content-Based Protocol Detection
October 23 2017I (Matthew Haigh) recently contributed to FLARE’s FakeNet-NG network simulator by adding content-based protocol detection and configuration. This feature is useful for analyzing malware that uses ...
Read moreNew FakeNet-NG Feature: Content-Based Protocol Detection
October 23 2017I (Matthew Haigh) recently contributed to FLARE’s FakeNet-NG network simulator by adding content-based protocol detection and configuration. This feature is useful for analyzing malware that uses ...
Read moreIntroducing Linux Support for FakeNet-NG: FLARE’s Next Generation Dynamic Network Analysis Tool
July 5 2017Introduction In 2016, FLARE introduced FakeNet-NG, an open-source network analysis tool written in Python. FakeNet-NG allows security analysts to observe and interact with network applications using...
Read moreIntroducing Linux Support for FakeNet-NG: FLARE’s Next Generation Dynamic Network Analysis Tool
July 5 2017Introduction In 2016, FLARE introduced FakeNet-NG, an open-source network analysis tool written in Python. FakeNet-NG allows security analysts to observe and interact with network applications using...
Read moreIntroducing Linux Support for FakeNet-NG: FLARE’s Next Generation Dynamic Network Analysis Tool
July 5 2017Introduction In 2016, FLARE introduced FakeNet-NG, an open-source network analysis tool written in Python. FakeNet-NG allows security analysts to observe and interact with network applications using...
Read moreIntroducing Linux Support for FakeNet-NG: FLARE’s Next Generation Dynamic Network Analysis Tool
July 5 2017Introduction In 2016, FLARE introduced FakeNet-NG, an open-source network analysis tool written in Python. FakeNet-NG allows security analysts to observe and interact with network applications using...
Read moreFLARE Script Series: Querying Dynamic State using the FireEye Labs Query-Oriented Debugger (flare-qdb)
January 4 2017Introduction This post continues the FireEye Labs Advanced Reverse Engineering (FLARE) script series. Here, we introduce flare-qdb, a command-line utility and Python module based on vivisect for...
Read more
Recent Comments