System Binary Proxy Execution: Rundll32
|
In the course, you will learn how a malicious user can obfuscate some of their payload actions through downloaded DLL files using the built-in rundll32.exe. Using rundll32, an attacker can make their activity look like a normal Windows system binary process being executed under rundll32.
Course Description
Learn how to detect and mitigate these techniques to protect your organization from this type of attack. Apply what you learn and get the hands-on skills you need in Cybrary’s MITRE ATT&CK Framework courses aligned to tactics and techniques used by threat actors.
Learn how to detect and mitigate these techniques to protect your organization from this type of attack. Apply what you learn and get the hands-on skills you need in Cybrary’s MITRE ATT&CK Framework courses aligned to tactics and techniques used by threat actors.
Module 1: Introduction
Module 2: What is Technique T1218.011?
User Reviews
Be the first to review “System Binary Proxy Execution: Rundll32”
You must be logged in to post a review.
There are no reviews yet.