Windows Offender: Reverse Engineering Windows Defender's Antivirus Emulator

In this presentation, we'll look at Defender's emulator for analysis of potentially malicious Windows PE binaries on the endpoint. To the best of my knowledge, there has never been a conference talk or publication on reverse engineering the internals of any antivirus binary emulator before.

By Alexei Bulazel

Full abstract and materials: https://www.blackhat.com/us-18/briefings/schedule/#windows-offender-reverse-engineering-windows-defenders-antivirus-emulator-9981

Видео Windows Offender: Reverse Engineering Windows Defender's Antivirus Emulator канала Black Hat