Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

APT Attribution and DNS Profiling

Black Hat via YouTube

Overview

Explore Advanced Persistent Threat (APT) attribution and DNS profiling in this 22-minute Black Hat conference talk. Delve into the organized and prolonged nature of APT attacks, focusing on their discernible attributes and patterns. Examine how APT attackers maintain redundant command and control networks through multiple DNS names. Investigate a study of malware samples from APT attack victims, revealing behavioral patterns in DNS domain registration and the use of stable DNS-IP pairs. Learn about an automated solution for collecting and storing open-source information on malware binaries, simplifying analysis tasks. Discover how to build and update a database of malicious DNS-IP pairs, "parked domains," and "whois information" for future analysis. Gain insights into using visualization tools like Maltego for identifying potential attacker identities or personas.

Syllabus

APT Attribution and DNS Profiling

Taught by

Black Hat

Reviews

Start your review of APT Attribution and DNS Profiling

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.