https://www.botnets.fr/index.php?action=history&feed=atom&title=Malware_hunting_with_the_Sysinternals_tools 2026-10-24T19:20:57Z Revision history for this page on the wiki MediaWiki 1.43.11 https://www.botnets.fr/index.php?title=Malware_hunting_with_the_Sysinternals_tools&diff=2496&oldid=prev 2015-02-07T14:27:58Z

<p>1 revision imported</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 14:27, 7 February 2015</td> </tr><tr><td colspan="4" class="diff-notice" lang="en"><div class="mw-diff-empty">(No difference)</div> </td></tr> <!-- diff cache key wiki:diff:1.41:old-2495:rev-2496 --> </table>

Eric.freyssinet https://www.botnets.fr/index.php?title=Malware_hunting_with_the_Sysinternals_tools&diff=2495&oldid=prev 2012-09-02T09:41:26Z

<p></p> <p><b>New page</b></p><div>{{Publication<br /> |Link=http://channel9.msdn.com/Events/TechEd/NorthAmerica/2012/SIA302 channel9.msdn.com<br /> |Author=Mark Russinovich<br /> |NomRevue=TechEd<br /> |Date=North America 2012<br /> |Editor=MSDN<br /> |Year=2012<br /> |Botnet=Stuxnet<br /> |Abstract=This session provides an overview of several Sysinternals tools, including Process Monitor, Process Explorer, and Autoruns, focusing on the features useful for malware analysis and removal. These utilities enable deep inspection and control of processes, file system and registry activity, and autostart execution points. Mark Russinovich demonstrates their malware-hunting capabilities by presenting several real-world cases that used the tools to identify and clean malware, and concludes by performing a live analysis of a Stuxnet infection’s system impact.<br /> }}</div>

Eric.freyssinet