Talos Takes

From evasion to detection: A guide to analyzing COM-based threats


Listen Later

While the Component Object Model (COM) is a fundamental Windows technology that allows software to communicate and function, it's also a powerful tool for threat actors looking to move laterally, maintain persistence, and evade traditional security measures.

Joining us is Vanya Svajcer, who shares his expertise on how to cut through the noise and identify malicious signals within COM-based binaries. Whether you are a seasoned researcher or just starting your journey into reverse engineering and malware analysis, here's some practical advice on how to start hunting for COM-based threats and making your next investigation a little more effective.

Vanja's blog: https://blog.talosintelligence.com/introduction-to-com-usage-by-windows-threats

...more
View all episodesView all episodes
Download on the App Store

Talos TakesBy Cisco Talos

  • 4.9
  • 4.9
  • 4.9
  • 4.9
  • 4.9

4.9

13 ratings


More shows like Talos Takes

View all
Security Now (Audio) by TWiT

Security Now (Audio)

2,009 Listeners

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

648 Listeners

CyberWire Daily by N2K Networks

CyberWire Daily

1,030 Listeners

Darknet Diaries by Jack Rhysider

Darknet Diaries

8,051 Listeners

CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

CISO Series Podcast

192 Listeners

Defense in Depth by CISO Series

Defense in Depth

73 Listeners

Afternoon Cyber Tea with Ann Johnson by Microsoft

Afternoon Cyber Tea with Ann Johnson

38 Listeners

Cybersecurity Headlines by CISO Series

Cybersecurity Headlines

136 Listeners

Threat Vector by Palo Alto Networks by Palo Alto Networks and N2K Networks

Threat Vector by Palo Alto Networks

38 Listeners