Why do we analyze malware? To understand our adversaries, specifically their capabilities, intent, and infrastructure. Analyzing a specific file can tell us about a specific campaign. Analyzing malware in bulk reveals unintended clues and patterns left behind by miscreants. These patterns reveal habits of actors and let us begin drawing connections that might otherwise go unseen. This talk will discuss approaches and tools, including live demos and new code, to work towards these goals.

Paul Melson has been in the information security field since 2001. Currently he works on detection and Cybersecurity tools innovation for a Fortune 50 company. He likes packets, malware, and beer.

@StephenHinck

Back to BSides Augusta 2016 video list