Ares

Project Ares Project Ares Injector Project Ares Injector는 Transacted Hollowing 기술을 기반으로 C/C++로 작성된 개념 증명PoC 로더입니다. 이 로더는 원격 프로세스에 PE를 주입하며 다음과 같은 기능을 제공합니다: PPID 스푸핑 비 Microsoft 서명 바이너리를 차단하는 CIG LoadLibrary 또는 GetProcAddress API 없이 동적 함수 해결 API 해싱 디스크의 깨끗한 버전으로 .text 섹션을 새로고침하여 NTDLL 언후킹 WIN32 A...

Rethinking cyber scenarios—learning (and training) as you defend

In two recent posts I discussed with Circadence the increasing importance of gamification for cybersecurity learning and how to get started as a practitioner while being supported by an enterprise learning officer or security team lead. In this third and final post in the series, Keenan and I...

Rethinking cyber learning—consider gamification

As promised, I’m back with a follow-up to my recent post, Rethinking how we learn security, on how we need modernize the learning experience for cybersecurity professionals by gamifying training to make learning fun. Some of you may have attended the recent Microsoft Ignite events in Orlando and...

Rethinking how we learn security

A couple of years ago, I wrote an article on the relative lack of investor and startup interest in addressing a crucial CISO priority—the preparedness of employees on the security team. Considering what seems to be a steady stream of news about breaches, what can be done to encourage more people ...