Cross-Platform Detection Techniques
Building on our introduction to fundamentals in YARA Rules 101, this advanced session dives into creating high-efficacy rules for varied computing architectures and execution environments.
We’ll explore platform-specific YARA techniques, examine how code formats impact signature strategies, and demonstrate practical methods for maintaining accuracy across diverse threats.
In this session, you’ll learn:
- Platform-aware signature approaches across instruction sets and memory layouts
- Masking techniques to handle code variation without reducing accuracy
- How to detect cross-platform infostealers with differing signatures
- Hands-on building techniques using dnSpy and JetBrains disassemblers.
Whether you’re focused on native malware or .NET threats, you’ll leave with actionable strategies to strengthen your detection efforts.
Offered Free by: ReversingLabs
See All Resources from: ReversingLabs