Basic HTML Version
FireEye-ийн судалгаа (4)
51
•
PoisonIvy
•
Different techniques
•
Powershell & Scripts
•
AppControl bypass
•
Most steps run in memory
•
Few forensic artifacts