YoVDO

Blinding Endpoint Security Solutions - WMI Attack Vectors

Offered By: Ekoparty Security Conference via YouTube

Tags

Ekoparty Security Conference Courses Cybersecurity Courses Malware Analysis Courses Endpoint Security Courses Threat Hunting Courses Windows Management Instrumentation (WMI) Courses

Course Description

Overview

Explore a groundbreaking conference talk on WMI attack vectors and their impact on endpoint security solutions. Delve into new research showcasing previously unseen attacks on WMI, involving both user and kernel mode vectors. Learn about WmiCheck, a novel security tool designed to detect various OS attacks, including those covered in this presentation. Gain insights from Claudiu Teodorescu, CTO and Co-founder of Binarly, as he discusses the weaknesses in WMI architecture and potential solutions for reliable OS event collection. Understand the critical importance of these attack vectors in disabling security solutions that rely on WMI telemetry, including EDR, AV, SIEM, and malware sandbox solutions.

Syllabus

Claudiu Teodorescu - Blinding Endpoint Security Solutions: WMI attack vectors - Ekoparty 2022


Taught by

Ekoparty Security Conference

Related Courses

Malicious Software and its Underground Economy: Two Sides to Every Story
University of London International Programmes via Coursera Palo Alto Networks Cybersecurity Essentials II
Palo Alto Networks via Coursera Introducción al Análisis del Malware en Windows
National Technological University – Buenos Aires Regional Faculty via Miríadax Android Malware Analysis - From Zero to Hero
Udemy How to Create and Embed Malware (2-in-1 Course)
Udemy