Loading…
Botconf 2017 has ended
View analytic
Friday, December 8 • 09:40 - 10:10
Formatting for Justice: Crime Doesn't Pay, Neither Does Rich Text

Log in to save this to your schedule and see who's attending!

Feedback form is now closed.
Due to it’s flexibility and capacity for embedding other objects, the rich text format (RTF) is a preferred file type used by both precision and quantity focused threat actors. This presentation will discuss the state of threats making use of the file format and provide a brief overview of how the file format is constructed. The presentation will also explain results of exploratory experiments conducted to achieve a deep comprehension of the file format’s structure. Best practices for building protections in organizations will be discussed. Techniques developed while hunting for specific features across large sample sets will be shared.

Speakers
avatar for Anthony Kasza

Anthony Kasza

Senior Threat Researcher, Palo Alto Networks
Anthony Kasza is a Senior Threat Researcher for Palo Alto Networks. At Palo Alto Networks, Anthony is responsible for discovering new and tracking known threats to ensure context around customer detections. Prior to Palo Alto Networks, Anthony was responsible for creating scalable... Read More →


Friday December 8, 2017 09:40 - 10:10
Corum Allée du Saint-Esprit, 34000 Montpellier, France