Cybersecurity – Training your staff.
In cybersecurity, training staff is of paramount importance. There are a lot of ways so do this and some are better than others. In this article we look at how you can find the path that works best for you.
Reflective Code Injection Attacks – An Overview for Incident Responders
Reflective code injection lets attackers execute code directly in process memory, leaving minimal file-system traces. This overview explains the technique on Windows and Linux, then covers detection methods for incident responders: VAD tree inspection, /proc analysis, RWX memory anomalies, suspicious system calls, and tools such as MemProcFS, Volatility and YARA.