Opsec Cyber Willi Ballenthin Archives

Category Archives: Willi Ballenthin

ELFant in the Room – capa v3

September 15 2021 By Syndicator in FLARE, Homepage Carousel, Latest Blog Posts, Malware, Reverse Engineering, Security, Threat Research, Willi Ballenthin

Since our initial public release of capa, incident responders and reverse engineers have used the tool to automatically identify capabilities in Windows executables. With our...

ELFant in the Room – capa v3

September 15 2021 By Syndicator in FLARE, Homepage Carousel, Latest Blog Posts, Malware, Reverse Engineering, Security, Threat Research, Willi Ballenthin

Since our initial public release of capa, incident responders and reverse engineers have used the tool to automatically identify capabilities in Windows executables. With our...

ELFant in the Room – capa v3

September 15 2021 By Syndicator in FLARE, Homepage Carousel, Latest Blog Posts, Malware, Reverse Engineering, Security, Threat Research, Willi Ballenthin

Since our initial public release of capa, incident responders and reverse engineers have used the tool to automatically identify capabilities in Windows executables. With our...

capa: Automatically Identify Malware Capabilities

July 16 2020 By Syndicator in analysis, FLARE, Homepage Carousel, Latest Blog Posts, Malware, Security, Threat Research, tools, Willi Ballenthin

capa is the FLARE team’s newest open-source tool for analyzing malicious programs. Our tool provides a framework for the community to encode, recognize, and share behaviors that...

capa: Automatically Identify Malware Capabilities

July 16 2020 By Syndicator in analysis, FLARE, Homepage Carousel, Latest Blog Posts, Malware, Security, Threat Research, tools, Willi Ballenthin

capa is the FLARE team’s newest open-source tool for analyzing malicious programs. Our tool provides a framework for the community to encode, recognize, and share behaviors that...

Living off the Orchard: Leveraging Apple Remote Desktop for Good and Evil

October 9 2019 By Daniel Pany in Apple, FLARE, Homepage Carousel, Incident Response, Jake Nicastro, Latest Blog Posts, Mac, tactics, techniques, Threat Research, Willi Ballenthin

Attackers often make their lives easier by relying on pre-existing operating system and third party applications in an enterprise environment. Leveraging these applications assists them with blending ...