[Autogenerated] Hello and welcome to the Mahler detection and analysis with
python course my name is christian pass Cariou and in this module will
automate the detection of malicious files using python.
Some of the important objectives that I aim to cover in this module
include improving detection of malicious files.
We will build a fall through urgent classification utility
that also integrates with file reputation services that
will scan through unknown files,
eliminating blind spots is another high priority.
Apart from the normal activities of the information security team,
an organization will have applications that accept file attachments and this
can be used by Attackers as a muller delivery mechanism.
The security team has a limited number of resources so automating
some of the manual analysis tasks will allow to save time and
allocate it for more complex investigations.
Now, before we get started, I want to also cover the course Logistics.
All scripts will be developed for Python tree as python two is end of life.
You can use any text editor or integrated development environment.
I will be making use of Visual Studio Code on a Linux virtual machines
since all of the OS libraries are already available.
If you are on a Windows machine you have the option to use the
Windows subsystem for Linux WsL for short.
One important concept that I want you to keep in mind is that you should
think of these scripts presented in this course more as building blocks and
I encourage you to modify them based on your own requirements because the
suspicious falls that will be working with are malicious and cannot be
shared on Pluralsight directly.
They will be available at this link.
Now we can dive into the technical aspects and I want to start with a short
overview of what exactly will cover in this module as well.
Put together a script.
One of the first features will be Fall type identification and we'll see
how aspects like Fall extension cannot be trusted.
Second,
we'll explore how to leverage hashing functions to generate file and
import hashes and make it much easier to compare files.
Next, we will identify malicious patterns in Falls with Tiara and finally,
we'll cover how to leverage further reputation services to
scan suspicious files from unknown sources.