Windows Kernel Rootkits | CodeMachine Free Download

Windows Kernel Rootkits | CodeMachine
English | Size: 11.77 GB
Genre: eLearning

To achieve maximum stealth and obtain unabated access to the system, rootkits execute in kernel mode. This course focuses on the kernel interfaces (APIs), data structures and mechanisms that are exploited by rootkits to achieve their goals at every stage of their execution. Kernel security enhancements that have been progressively added from Windows 7 to the latest version of Windows are discussed along with some circumvention techniques.

This advanced course provides a comprehensive end-to-end view of the modus-operandi of rootkits by taking an in-depth look at behind the scenes working of the Windows kernel and how these mechanisms are exploited by malware through hands-on labs and real-world case studies. Kernel security enhancements that have been progressively added to Windows are discussed along with some circumvention techniques. Attendees will study key techniques used by rootkits to understand the real-world applicability of these concepts for offensive and defensive purposes.

This training is beneficial to anyone responsible for developing, detecting, analyzing, and defending against rootkits and other Windows kernel post-exploitation techniques including EPP/EDR software developers, anti-malware engineers, security researchers, red/blue/purple teamers.

A special version of this training is also available for malware, rootkit forensics analysts where the focus is not on implementing rootkit functionality but rather on investigating rootkits using tools such as WinDBG and Volatility. This analyst version does not require attendees to have a programming background and contains topics related to rootkit detection and case studies.

Learning Objectives
Understand vulnerabilities in the Windows kernel and device drivers.
Be able to write and modify kernel-mode exploits.
Understand the security enhancements that have been added to the Windows kernel over time.
Be able to bypass some of the security mitigations in recent versions of Windows.
Understand the post-exploitation steps performed by kernel-mode rootkits.
Understand the techniques used by real-world rootkits.
Understand how rootkits hide their presence in the system.
Understand how rootkits intercept systemwide networking activity.
Be able to identify malicious behavior and defend against rootkits.
Topics
Kernel Attacks
Kernel Shellcoding
Kernel Hooking and Injection
Kernel Callbacks
Kernel Filtering
Kernel Networking
Virtualization Based Security

DOWNLOAD FROM RAPIDGATOR

DOWNLOAD FROM TURBOBIT

If any links die or problem unrar, send request to
forms.gle/e557HbjJ5vatekDV9

Leave a Comment Cancel reply