Earlier, Joe Desimon told about the approach to finding traditional memory attacks along with in-depth analysis of many injection methods. In this article, the emerging trend of opponents using .NET in-memory methods to avoid detection will be investigated. Joe will consider both the strategies for defining events (in real time) and the strategies for determining these methods on demand. NET.
Recently there has been a noticeable surge in tradercraft. Using .NET in-memory techniques, or even standard .NET applications, are attractive to adversaries for several reasons. This is primarily due to the fact that it allows attackers to have maximum compatibility between victims. You can learn more about Hunting for Attacks in Memory .NET in this article.
