The Case for Learning Python® for Malware Analysis
The Case for Learning Python® for Malware Analysis Why Python is the best language for fighting malware If you are a malware analyst, you really can’t resist learning and using Python anymore. The best...
View ArticleSimple and Powerful DNS Testing with Scapy
Simple and Powerful DNS Testing with Scapy An effective tool to test DNS (Domain Name System) When testing DNS Defender®, CloudShield’s specialized DNS firewall, an application traffic generator is my...
View ArticleLearn How to Use Python to Assist with Network Forensics
Learn How to Use Python to Assist with Network Forensics Leverage Python ctypes for quick development of protocol decoders During an active incident, there typically isn’t enough time to thoroughly...
View ArticleSimple and Powerful Testing with Scapy – Part II
Simple and Powerful Testing with Scapy – Part II Use Scapy for DNS fuzzing tests on CloudShield DNS Defender® In a previous post, I shared about the advantages of using Scapy for DNS testing. In this...
View ArticleEfficient Detection of XOR-Encoded Traffic, Part 1 of 2
Efficient Detection of XOR-Encoded Traffic, Part 1 of 2 More tips for the savvy malware analyst The exclusive-or (XOR) logical operation[1] is commonly used by malware to obfuscate exploit payloads...
View Article