Skip to content
H4vox
0/12

Writing

Notes from the lab, published as I go. Each technique is written up from both sides: how it works, and how to catch it.

blog.h4vox.site

The disk box

The blog
  1. The Art of Malware ObfuscationSurvey of obfuscation strategies used in modern samples and what actually raises the cost for analysis.malware-techniques
  2. QuickstartEntry point for the malware techniques series: scope, lab setup, and how the notes are structured.malware-techniques · series intro
  3. XOR Malware ExecutionWalkthrough of XOR-based payload staging and execution patterns commonly seen in real samples.malware-techniques
  4. How to Detect XOR ObfuscationDetection-side companion: signal patterns, YARA constructs, and telemetry angles for spotting XOR-obfuscated payloads.detection · YARA
  5. All writingblog.h4vox.site

Index

  1. The Art of Malware Obfuscationmalware-techniquesSurvey of obfuscation strategies used in modern samples and what actually raises the cost for analysis.blog.h4vox.siteRead
  2. Quickstartmalware-techniques · series introEntry point for the malware techniques series: scope, lab setup, and how the notes are structured.blog.h4vox.siteRead
  3. XOR Malware Executionmalware-techniquesWalkthrough of XOR-based payload staging and execution patterns commonly seen in real samples.blog.h4vox.siteRead
  4. How to Detect XOR Obfuscationdetection · YARADetection-side companion: signal patterns, YARA constructs, and telemetry angles for spotting XOR-obfuscated payloads.blog.h4vox.siteRead