Maldocs: A Bit of Blue, A Bit of Red | SANS@MIC Talk
23In this talk, Didier Stevens will show you how to use his free, open-source tools to analyze malicious PDFs and Office documents.
And how you can leverage your analysis with IOCs as a blue teamer, but also leverage your analysis for red team exercises.
Speaker Bio
Didier Stevens (SANS ISC Handler, Microsoft MVP, …) is a Senior Analyst working at NVISO (https://www.nviso.be). Didier is a pioneer in malicious PDF document research and malicious MS Office documents analysis, and has developed several tools to help with the analysis of malicious documents like PDF and MS Office files. Didier regularly participates in pentests and red team engagements to create task specific documents. You can find his open source security tools on his IT security related blog. http://blog.DidierStevens.com