From Dead Data to Digestion - Extracting Windows Fibers for Your Digital Forensics Diet
-
34
-
- Write review
The Fastest Way to Become a Backend Developer Online
PowerBI Data Analyst - Create visualizations and dashboards from scratch
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Embark on a journey through the intricacies of Windows Fibers in this 27-minute Black Hat conference talk. Discover how to reverse-engineer the underlying API, delve into the undocumented internals of Fibers, and leverage this knowledge to create granular detection telemetry from process memory. Learn about a novel tool called Weetabix, which automates the entire process, benefiting threat hunting teams and EDR developers. Presented by Daniel Jary, this talk offers valuable insights for digital forensics professionals seeking to enhance their investigative capabilities and expand their understanding of Windows internals.
Syllabus
From Dead Data to Digestion: Extracting Windows Fibers for Your Digital Forensics Diet
Taught by
Black Hat
Reviews
5.0 rating, based on 1 Class Central review
Showing Class Central Sort
-
Very Informative! Learnt a lot. Useful tool release `weetabix` alongside the presentation allowed me to identify anomalous fiber usage in memory!