Possibly checks for the presence of an Antivirus engineĪdversaries may target user email to collect sensitive information.įound a potential E-Mail address in binary/memoryĪdversaries may try to access and collect application data resident on the device.Īdversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Possibly tries to implement anti-virtualization techniquesĪdversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment.
Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit.Īdversaries may employ various means to detect and avoid virtualization and analysis environments.
0 kommentar(er)
